feat: new bludit version with bug fix for php 5

Fix 2 deprecated messages

.github/issue_template.md

@@ -0,0 +1,18 @@
+Please follow the next steps. The issue will be closed if the following steps are not completed. Thank you. (You can remove this line).
+
+### Describe your problem
+Complete here.
+
+### Steps to reproduce the problem
+Complete here.
+
+### Bludit version
+Complete here.
+
+### PHP version
+If you do not know remove this line.
+
+### PHP logs
+If you do not know remove this line.
+
+The default settings of the PHP Error Log file varies from OS to OS. The location of the error log file itself can be set manually in the php.ini file. On a Windows server, in IIS, it may be something like `error_log = C:\log_files\php_errors.log` in Linux it may be a value of `/var/log/php_errors.log`.

.gitignore

@@ -1,7 +1,32 @@
 .DS_Store
-!themes/pure
-themes/*
-content/databases
-content/pages
-content/posts
-content/uploads
+dbgenerator.php
+bl-content/*
+!bl-content/.keep
+bl-content-migrator
+bl-plugins/timemachine
+bl-plugins/timemachine-x
+bl-plugins/discovery
+bl-plugins/updater
+bl-plugins/medium-editor
+bl-plugins/quill
+bl-plugins/yandex-metrica/
+bl-plugins/domain-migrator/
+bl-plugins/tail-writer/
+bl-kernel/bludit.pro.php
+bl-kernel/admin/themes/gris
+bl-themes/docs
+bl-themes/typerite
+bl-themes/docsx
+bl-themes/editorial
+bl-themes/mediumish
+bl-themes/clean-blog
+bl-themes/grayscale
+bl-themes/massively
+bl-themes/hyperspace
+bl-themes/striped
+bl-themes/log
+bl-themes/micro
+bl-themes/tagg
+bl-themes/small
+bl-themes/future-imperfect
+bl-themes/social-network

.htaccess

@@ -5,11 +5,15 @@ AddDefaultCharset UTF-8
 # Enable rewrite rules
 RewriteEngine on
 
-# Deny direct access to .txt files
-RewriteRule ^content/(.*)\.txt$ - [R=404,L]
+# Base directory
+RewriteBase /
+
+# Deny direct access to the next directories
+RewriteRule ^bl-content/(databases|workspaces|pages|tmp)/.*$ - [R=404,L]
 
 # All URL process by index.php
 RewriteCond %{REQUEST_FILENAME} !-f
+RewriteCond %{REQUEST_FILENAME} !-d
 RewriteRule ^(.*) index.php [PT,L]
 
 </IfModule>

.prettierrc

@@ -0,0 +1,7 @@
+{
+  "semi": true,
+  "singleQuote": true,
+  "useTabs": false,
+  "tabWidth": 2,
+  "printWidth": 100
+}

LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2015-2023 Diego Najar
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -1,46 +1,52 @@
-[Bludit](http://www.bludit.com/) — Flat file CMS
-================================================
-Create your own Blog in seconds.
+# [Bludit](https://www.bludit.com/)
 
-Fast, simple, extensible and Flat file CMS.
+Bludit the Simple, Fast, and Flexible CMS.
 
-- [Documentation](http://docs.bludit.com)
-- [Help and Support](http://forum.bludit.com)
-- [Plugins](https://github.com/dignajar/bludit-plugins)
-- [Themes](https://github.com/dignajar/bludit-themes)
-- [More plugins and themes](http://forum.bludit.com/viewforum.php?f=14)
+With Bludit, you can build your own website or blog in just seconds. It’s completely free, open-source, and easy to use. Bludit stores content in JSON format, eliminating the need for database installation or configuration. All you need is a web server with PHP support.
 
-Social
-------
+As a Flat-File CMS, Bludit offers unparalleled flexibility and speed. Plus, with support for both Markdown and HTML code, creating and managing content has never been easier.
 
-- [Twitter](https://twitter.com/bludit)
-- [Facebook](https://www.facebook.com/bluditcms)
-- [Google+](https://plus.google.com/+Bluditcms)
-- [Freenode IRC](https://webchat.freenode.net) channel #bludit
+## Resources
 
-[![Join the chat at https://gitter.im/dignajar/bludit](https://badges.gitter.im/Join%20Chat.svg)](https://gitter.im/dignajar/bludit?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge&utm_content=badge)
+- [Plugins](https://plugins.bludit.com)
+- [Themes](https://themes.bludit.com)
+- [Documentation](https://docs.bludit.com)
+- News and announcement on [Twitter](https://twitter.com/bludit), [Facebook](https://www.facebook.com/bluditcms), and [Reddit](https://www.reddit.com/r/bludit/)
+- Talk & Chat on [Discord](https://discord.gg/CFaXEdZWds)
+- Help and Support on [Forum](https://forum.bludit.org)
+- Bugs reports on [Github Issues](https://github.com/bludit/bludit/issues)
 
-Requirements
-------------
+## Requirements
 
-You only need a web server with PHP support.
-
-- PHP 5.3 or higher.
+- Webserver with PHP support.
+- PHP v5.6 or higher version.
 - PHP [mbstring](http://php.net/manual/en/book.mbstring.php) module for full UTF-8 support.
-- Webserver:
-  * Apache with [mod_rewrite](http://httpd.apache.org/docs/current/mod/mod_rewrite.html) module.
-  * Lighttpd with [mod_rewrite](http://redmine.lighttpd.net/projects/1/wiki/docs_modrewrite) module.
-  * Nginx with [ngx_http_rewrite_module](http://nginx.org/en/docs/http/ngx_http_rewrite_module.html) module.
-  * PHP Built-in web server
+- PHP [gd](http://php.net/manual/en/book.image.php) module for image processing.
+- PHP [dom](http://php.net/manual/en/book.dom.php) module for DOM manipulation.
+- PHP [json](http://php.net/manual/en/book.json.php) module for JSON manipulation.
 
-Installation guide
-------------------
+## Installation
 
-1. Download the latest version from http://www.bludit.com/bludit_latest.zip
-2. Extract the zip file into a directory like `bludit`.
-3. Upload the directory `bludit` to your hosting server.
-4. Done!
+1. Download the latest version from the official page: [Bludit.com](https://www.bludit.com)
+2. Extract the zip file into a directory, such as `bludit`.
+3. Upload the `bludit` directory to your web server or hosting.
+4. Visit your domain (e.g., https://example.com/bludit/).
+5. Follow the Bludit Installer to set up your website.
 
-License
--------
-Bludit is opensource software licensed under the [MIT license](https://tldrlegal.com/license/mit-license)
+## Quick installation for testing
+
+You can use PHP Built-in web server (`php -S localhost:8000`) or [Docker image](https://hub.docker.com/r/bludit/docker/)
+
+## Support Bludit
+
+Bludit is open-source and free to use, but if you find the project useful and would like to support its development, you can contribute on [Patreon](https://www.patreon.com/bePatron?c=921115&rid=2458860). As a token of our appreciation, supporters will receive Bludit PRO.
+
+If you prefer, you can also make a one-time donation to buy us a coffee or beer. Every contribution helps us continue to improve Bludit and provide the best possible experience for our users.
+
+- [PayPal](https://www.paypal.me/bludit/10)
+- BTC (Network BTC): bc1qtets5pdj73uyysjpegfh2gar4pfywra4rglcph
+- ETH (Network ETH): 0x0d7D58D848aA5f175D75Ce4bC746bAC107f331b7
+
+## License
+
+Bludit is open source software licensed under the [MIT license](https://tldrlegal.com/license/mit-license).

bl-kernel/abstract/dbjson.class.php

@@ -0,0 +1,120 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+class dbJSON {
+
+	public $db;
+	public $dbBackup;
+	public $file;
+	public $firstLine;
+
+	// $file, the JSON file.
+	// $firstLine, TRUE if you want to remove the first line, FALSE otherwise
+	function __construct($file, $firstLine=true)
+	{
+		$this->file = $file;
+		$this->db = array();
+		$this->dbBackup = array();
+		$this->firstLine = $firstLine;
+
+		if (file_exists($file)) {
+			// Read JSON file
+			$lines = file($file);
+
+			// Remove the first line, the first line is for security reasons
+			if ($firstLine) {
+				unset($lines[0]);
+			}
+
+			// Regenerate the JSON file
+			$implode = implode($lines);
+
+			// Unserialize, JSON to Array
+			$array = $this->unserialize($implode);
+			if (empty($array)) {
+				$this->db = array();
+				$this->dbBackup = array();
+			} else {
+				$this->db = $array;
+				$this->dbBackup = $array;
+			}
+		}
+	}
+
+	public function restoreDB()
+	{
+		$this->db = $this->dbBackup;
+		return true;
+	}
+
+	// Returns the number of rows in the database
+	public function count()
+	{
+		return count($this->db);
+	}
+
+	// Returns the value from the field
+	public function getField($field)
+	{
+		if (isset($this->db[$field])) {
+			return $this->db[$field];
+		}
+		return $this->dbFields[$field];
+	}
+
+	// Save the JSON file
+	public function save()
+	{
+		$data = '';
+		if ($this->firstLine) {
+			$data  = "<?php defined('BLUDIT') or die('Bludit CMS.'); ?>".PHP_EOL;
+		}
+
+		// Serialize database
+		$data .= $this->serialize($this->db);
+
+		// Backup the new database.
+		$this->dbBackup = $this->db;
+
+		// LOCK_EX flag to prevent anyone else writing to the file at the same time.
+		if (file_put_contents($this->file, $data, LOCK_EX)) {
+			return true;
+		} else {
+			Log::set(__METHOD__.LOG_SEP.'Error occurred when trying to save the database file.', LOG_TYPE_ERROR);
+			return false;
+		}
+	}
+
+	// Returns a JSON encoded string on success or FALSE on failure
+	private function serialize($data)
+	{
+		if (DEBUG_MODE) {
+			return json_encode($data, JSON_PRETTY_PRINT);
+		}
+		return json_encode($data);
+	}
+
+	// Returns the value encoded in json in appropriate PHP type
+	private function unserialize($data)
+	{
+		// NULL is returned if the json cannot be decoded
+		$decode = json_decode($data, true);
+		if ($decode===NULL) {
+			Log::set(__METHOD__.LOG_SEP.'Error trying to read the JSON file: '.$this->file, LOG_TYPE_ERROR);
+			return false;
+		}
+		return $decode;
+	}
+
+	public function getDB()
+	{
+		return $this->db;
+	}
+
+	// Truncate all the rows
+	public function truncate()
+	{
+		$this->db = array();
+		return $this->save();
+	}
+
+}

bl-kernel/abstract/dblist.class.php

@@ -0,0 +1,191 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+/*
+Database structure
+
+{
+	"videos": {
+		"name": "Videos",
+		"template: "",
+		"description: "",
+		"list": [ "my-page", "second-page" ]
+	},
+	"pets": {
+		"name": "Pets",
+		"template: "",
+		"description: "",
+		"list": [ "cats-and-dogs" ]
+	}
+}
+*/
+
+class dbList extends dbJSON
+{
+	public $db = array();
+
+	function __construct($file)
+	{
+		parent::__construct($file);
+	}
+
+	public function keys()
+	{
+		return array_keys($this->db);
+	}
+
+	// Returns the list of keys filter by pageNumber
+	// $pageNumber start in 1
+	public function getList($key, $pageNumber, $numberOfItems)
+	{
+		if (!isset($this->db[$key])) {
+			Log::set(__METHOD__.LOG_SEP.'Error key does not exist '.$key);
+			return false;
+		}
+
+		// List of keys
+		$list = $this->db[$key]['list'];
+
+		// Returns all the items from the list
+		if ($numberOfItems==-1) {
+			return $list;
+		}
+
+		// The first page number is 1, so the real is 0
+		$realPageNumber = $pageNumber - 1;
+		$chunks = array_chunk($list, $numberOfItems);
+		if (isset($chunks[$realPageNumber])) {
+			return $chunks[$realPageNumber];
+		}
+
+		// Out of index,returns FALSE
+		return false;
+	}
+
+	public function generateKey($name)
+	{
+		global $L;
+
+		$key = Text::cleanUrl($name);
+		if (Text::isEmpty($key)) {
+			$key = $L->g('empty');
+		}
+		while (isset($this->db[$key])) {
+			$key++;
+		}
+		return $key;
+	}
+
+	// Add a new item to the dblist
+	// $args => 'name', 'template', 'description', list'
+	public function add($args)
+	{
+		$key = $this->generateKey($args['name']);
+
+		$this->db[$key]['name'] 	= Sanitize::removeTags($args['name']);
+		$this->db[$key]['template'] 	= isset($args['template'])?Sanitize::removeTags($args['template']):'';
+		$this->db[$key]['description'] 	= isset($args['description'])?Sanitize::removeTags($args['description']):'';
+		$this->db[$key]['list'] 	= isset($args['list'])?$args['list']:array();
+
+		$this->sortAlphanumeric();
+		$this->save();
+		return $key;
+	}
+
+	public function remove($key)
+	{
+		if (!isset($this->db[$key])) {
+			Log::set(__METHOD__.LOG_SEP.'The key does not exist, key: '.$key);
+			return false;
+		}
+
+		unset($this->db[$key]);
+		return $this->save();
+	}
+
+	// Edit an item to the dblist
+	// $args => 'name', 'oldkey', 'newKey', 'template', 'description'
+	public function edit($args)
+	{
+		if ( isset($this->db[$args['newKey']]) && ($args['newKey']!==$args['oldKey']) ) {
+			Log::set(__METHOD__.LOG_SEP.'The new key already exists. Key: '.$args['newKey'], LOG_TYPE_WARN);
+			return false;
+		}
+
+		$this->db[$args['newKey']]['name'] 	= Sanitize::removeTags($args['name']);
+		$this->db[$args['newKey']]['template'] 	= isset($args['template'])?Sanitize::removeTags($args['template']):'';
+		$this->db[$args['newKey']]['description'] = isset($args['description'])?Sanitize::removeTags($args['description']):'';
+		$this->db[$args['newKey']]['list'] 	= $this->db[$args['oldKey']]['list'];
+
+		// Remove the old category
+		if ($args['oldKey'] !== $args['newKey']) {
+			unset( $this->db[$args['oldKey']] );
+		}
+
+		$this->sortAlphanumeric();
+		$this->save();
+		return $args['newKey'];
+	}
+
+	// Sort the categories by "Natural order"
+	public function sortAlphanumeric()
+	{
+		// Sort key alphanumeric strings, a01, a10, b10, c02
+		return ksort($this->db);
+	}
+
+	// Returns the name associated to the key, FALSE if the key doesn't exist
+	public function getName($key)
+	{
+		if (isset($this->db[$key])) {
+			return $this->db[$key]['name'];
+		}
+		return false;
+	}
+
+	// Returns an array with key=>name of the list
+	public function getKeyNameArray()
+	{
+		$tmp = array();
+		foreach($this->db as $key=>$fields) {
+			$tmp[$key] = $fields['name'];
+		}
+		return $tmp;
+	}
+
+	// Returns the number of items in the list
+	public function countItems($key)
+	{
+		if (isset($this->db[$key])) {
+			return count($this->db[$key]['list']);
+		}
+		return 0;
+	}
+
+	public function exists($key)
+	{
+		return isset( $this->db[$key] );
+	}
+
+	public function existsName($name)
+	{
+		foreach ($this->db as $key=>$fields) {
+			if ($name==$fields['name']) {
+				return true;
+			}
+		}
+		return false;
+	}
+
+	// Returns an array with a portion of the database filtered by key
+	// Returns array( 'key'=>'', 'name'=>'', 'template'=>'', 'description'=>'', list'=>array() )
+	public function getMap($key)
+	{
+		if (isset($this->db[$key])) {
+			$tmp = $this->db[$key];
+			$tmp['key'] = $key;
+			return $tmp;
+		}
+		return false;
+	}
+
+}

bl-kernel/abstract/plugin.class.php

@@ -0,0 +1,354 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+class Plugin
+{
+
+	// (string) directory name, just the name
+	// Ex: sitemap
+	public $directoryName;
+
+	// (string) Absolute database filename and path
+	// Ex: /www/bludit/bl-content/plugins/sitemap/db.php
+	public $filenameDb;
+
+	// (string) Absolute metadata filename and path
+	// Ex: /www/bludit/bl-plugins/sitemap/metadata.json
+	public $filenameMetadata;
+
+	// (array) Plugin metadata
+	// Ex: array('author'=>'',...., 'notes'=>'')
+	public $metadata;
+
+	// (string) Class name
+	// Ex: pluginSitemap
+	public $className;
+
+	// (array) Database unserialized
+	public $db;
+
+	// (array) Database fields, only for initialize
+	public $dbFields;
+
+	// (boolean) Enable or disable default Save and Cancel button on plugin settings
+	public $formButtons;
+
+	// (array) List of custom hooks
+	public $customHooks;
+
+	function __construct()
+	{
+		$this->dbFields = array();
+		$this->customHooks = array();
+
+		$reflector = new ReflectionClass(get_class($this));
+
+		// Directory name
+		$this->directoryName = basename(dirname($reflector->getFileName()));
+
+		// Class Name
+		$this->className = $reflector->getName();
+
+		$this->formButtons = true;
+
+		// Call the method init() from the children
+		$this->init();
+
+		// Init empty database with default values
+		$this->db = $this->dbFields;
+
+		$this->filenameDb = PATH_PLUGINS_DATABASES . $this->directoryName . DS . 'db.php';
+
+		// --- Metadata ---
+		$this->filenameMetadata = PATH_PLUGINS . $this->directoryName() . DS . 'metadata.json';
+		$metadataString = file_get_contents($this->filenameMetadata);
+		$this->metadata = json_decode($metadataString, true);
+
+		// If the plugin is installed then get the database
+		if ($this->installed()) {
+			$Tmp = new dbJSON($this->filenameDb);
+			$this->db = $Tmp->db;
+			$this->prepare();
+		}
+	}
+
+	public function save()
+	{
+		$tmp = new dbJSON($this->filenameDb);
+		$tmp->db = $this->db;
+		return $tmp->save();
+	}
+
+	public function includeCSS($filename)
+	{
+		return '<link rel="stylesheet" type="text/css" href="' . $this->domainPath() . 'css/' . $filename . '?version=' . BLUDIT_VERSION . '">' . PHP_EOL;
+	}
+
+	public function includeJS($filename)
+	{
+		return '<script charset="utf-8" src="' . $this->domainPath() . 'js/' . $filename . '?version=' . BLUDIT_VERSION . '"></script>' . PHP_EOL;
+	}
+
+	// Returns absolute URL and path of the plugin directory
+	// This function helps to include CSS or Javascript files with absolute URL
+	public function domainPath()
+	{
+		return DOMAIN_PLUGINS . $this->directoryName . '/';
+	}
+
+	// Returns relative path of the plugin directory
+	// This function helps to include CSS or Javascript files with relative URL
+	public function htmlPath()
+	{
+		return HTML_PATH_PLUGINS . $this->directoryName . '/';
+	}
+
+	// Returns absolute path of the plugin directory
+	// This function helps to include PHP libraries or some file at server level
+	public function phpPath()
+	{
+		return PATH_PLUGINS . $this->directoryName . DS;
+	}
+
+	public function phpPathDB()
+	{
+		return PATH_PLUGINS_DATABASES . $this->directoryName . DS;
+	}
+
+	// Returns the value of the key from the metadata of the plugin, FALSE if the key doesn't exist
+	public function getMetadata($key)
+	{
+		if (isset($this->metadata[$key])) {
+			return $this->metadata[$key];
+		}
+
+		return false;
+	}
+
+	// Set a key / value on the metadata of the plugin
+	public function setMetadata($key, $value)
+	{
+		$this->metadata[$key] = $value;
+		return true;
+	}
+
+	// Returns the value of the field from the database
+	// (string) $field
+	// (boolean) $html, TRUE returns the value sanitized, FALSE unsanitized
+	public function getValue($field, $html = true)
+	{
+		if (isset($this->db[$field])) {
+			if ($html) {
+				return $this->db[$field];
+			} else {
+				return Sanitize::htmlDecode($this->db[$field]);
+			}
+		}
+		return $this->dbFields[$field];
+	}
+
+	public function label()
+	{
+		return $this->getMetadata('label');
+	}
+
+	public function name()
+	{
+		return $this->getMetadata('name');
+	}
+
+	public function description()
+	{
+		return $this->getMetadata('description');
+	}
+
+	public function author()
+	{
+		return $this->getMetadata('author');
+	}
+
+	public function email()
+	{
+		return $this->getMetadata('email');
+	}
+
+	public function website()
+	{
+		return $this->getMetadata('website');
+	}
+
+	public function position()
+	{
+		return $this->getValue('position');
+	}
+
+	public function version()
+	{
+		return $this->getMetadata('version');
+	}
+
+	public function releaseDate()
+	{
+		return $this->getMetadata('releaseDate');
+	}
+
+	public function className()
+	{
+		return $this->className;
+	}
+
+	public function formButtons()
+	{
+		return $this->formButtons;
+	}
+
+	public function isCompatible()
+	{
+		$bluditRoot = explode('.', BLUDIT_VERSION);
+		$compatible = explode(',', $this->getMetadata('compatible'));
+		foreach ($compatible as $version) {
+			$root = explode('.', $version);
+			if ($root[0] == $bluditRoot[0] && $root[1] == $bluditRoot[1]) {
+				return true;
+			}
+		}
+		return false;
+	}
+
+	public function directoryName()
+	{
+		return $this->directoryName;
+	}
+
+	// Return TRUE if the installation success, otherwise FALSE.
+	public function install($position = 1)
+	{
+		if ($this->installed()) {
+			return false;
+		}
+
+		// Create workspace
+		$workspace = $this->workspace();
+		mkdir($workspace, DIR_PERMISSIONS, true);
+
+		// Create plugin directory for the database
+		mkdir(PATH_PLUGINS_DATABASES . $this->directoryName, DIR_PERMISSIONS, true);
+
+		$this->dbFields['position'] = $position;
+		// Sanitize default values to store in the file
+		foreach ($this->dbFields as $key => $value) {
+			$value = Sanitize::html($value);
+			settype($value, gettype($this->dbFields[$key]));
+			$this->db[$key] = $value;
+		}
+
+		// Create the database
+		return $this->save();
+	}
+
+	public function uninstall()
+	{
+		// Delete database
+		$path = PATH_PLUGINS_DATABASES . $this->directoryName;
+		Filesystem::deleteRecursive($path);
+
+		// Delete workspace
+		$workspace = $this->workspace();
+		Filesystem::deleteRecursive($workspace);
+
+		return true;
+	}
+
+	// Returns TRUE if the plugin is installed
+	// This function just check if the database of the plugin is created
+	public function installed()
+	{
+		return file_exists($this->filenameDb);
+	}
+
+	public function workspace()
+	{
+		return PATH_WORKSPACES . $this->directoryName . DS;
+	}
+
+	public function init()
+	{
+		// This method is used on children classes
+		// The user can define his own field of the database
+	}
+
+	public function prepare()
+	{
+		// This method is used on children classes
+		// The user can prepare the plugin, when it is installed
+	}
+
+	public function post()
+	{
+		$args = $_POST;
+		foreach ($this->dbFields as $field => $value) {
+			if (isset($args[$field])) {
+				$finalValue = Sanitize::html($args[$field]);
+				if ($finalValue === 'false') {
+					$finalValue = false;
+				} elseif ($finalValue === 'true') {
+					$finalValue = true;
+				}
+				settype($finalValue, gettype($value));
+				$this->db[$field] = $finalValue;
+			}
+		}
+		return $this->save();
+	}
+
+	public function type()
+	{
+		return $this->getMetadata('type');
+	}
+
+	public function setField($field, $value)
+	{
+		$this->db[$field] = Sanitize::html($value);
+		return $this->save();
+	}
+
+	public function setPosition($position)
+	{
+		return $this->setField('position', $position);
+	}
+
+	// Returns the parameters after the URI, FALSE if the URI doesn't match with the webhook
+	// Example: https://www.mybludit.com/api/foo/bar
+	public function webhook($URI = false, $returnsAfterURI = false, $fixed = true)
+	{
+		global $url;
+
+		if (empty($URI)) {
+			return false;
+		}
+
+		// Check URI start with the webhook
+		$startString = HTML_PATH_ROOT . $URI;
+		$URI = $url->uri();
+		$length = mb_strlen($startString, CHARSET);
+		if (mb_substr($URI, 0, $length) != $startString) {
+			return false;
+		}
+
+		$afterURI = mb_substr($URI, $length);
+		if (!empty($afterURI)) {
+			if ($fixed) {
+				return false;
+			}
+			if ($afterURI[0] != '/') {
+				return false;
+			}
+		}
+
+		if ($returnsAfterURI) {
+			return $afterURI;
+		}
+
+		Log::set(__METHOD__ . LOG_SEP . 'Webhook requested.');
+		return true;
+	}
+}

bl-kernel/admin/controllers/about.php

@@ -0,0 +1,4 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// Title of the page
+$layout['title'] = $L->g('About') . ' - ' . $layout['title'];

bl-kernel/admin/controllers/api.php

@@ -0,0 +1,40 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+activatePlugin('pluginAPI');
+$apiURL = DOMAIN_BASE.'api/';
+$pluginAPI = getPlugin('pluginAPI');
+$apiToken = $pluginAPI->getToken();
+$username = $login->username();
+$admin = new User($username);
+$authToken = $admin->tokenAuth();
+$output = array(
+	'apiURL'=>$apiURL,
+	'username'=>$username,
+	'apiToken'=>$apiToken,
+	'authToken'=>$authToken
+);
+exit(json_encode($output));
+
+?>

bl-kernel/admin/controllers/categories.php

@@ -0,0 +1,26 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Categories');

bl-kernel/admin/controllers/configure-plugin.php

@@ -0,0 +1,53 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+$plugin = false;
+$pluginClassName = $layout['parameters'];
+
+// Check if the plugin exists
+if (isset($plugins['all'][$pluginClassName])) {
+	$plugin = $plugins['all'][$pluginClassName];
+} else {
+	Redirect::page('plugins');
+}
+
+// Check if the plugin has the method form()
+if (!method_exists($plugin, 'form')) {
+	Redirect::page('plugins');
+}
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	// Add to syslog
+	$syslog->add(array(
+		'dictionaryKey'=>'plugin-configured',
+		'notes'=>$plugin->name()
+	));
+
+	// Call the method post of the plugin
+	$plugin->post();
+	Alert::set( $L->g('The changes have been saved') );
+	Redirect::page('configure-plugin/'.$plugin->className());
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Title of the page
+$layout['title'] = $L->g('Plugin').' - '.$plugin->name().' - '.$layout['title'];

bl-kernel/admin/controllers/content.php

@@ -0,0 +1,60 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin', 'editor', 'author'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// Returns the content belongs to the current user if the user has the role Editor
+function filterContentOwner($list) {
+	global $login;
+	global $pages;
+	$tmp = array();
+	foreach ($list as $pageKey) {
+		if ($pages->db[$pageKey]['username']==$login->username()) {
+			array_push($tmp, $pageKey);
+		}
+	}
+	return $tmp;
+}
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+$published = $pages->getList($url->pageNumber(), ITEMS_PER_PAGE_ADMIN);
+$drafts = $pages->getDraftDB(true);
+$scheduled = $pages->getScheduledDB(true);
+$static = $pages->getStaticDB(true);
+$sticky = $pages->getStickyDB(true);
+$autosave = $pages->getAutosaveDB(true);
+
+// If the user is an Author filter the content he/she can edit
+if (checkRole(array('author'), false)) {
+	$published 	= filterContentOwner($published);
+	$drafts 	= filterContentOwner($drafts);
+	$scheduled 	= filterContentOwner($scheduled);
+	$static 	= filterContentOwner($static);
+	$sticky 	= filterContentOwner($sticky);
+}
+
+// Check if out of range the pageNumber
+if (empty($published) && $url->pageNumber()>1) {
+	Redirect::page('content');
+}
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Manage content');

bl-kernel/admin/controllers/dashboard.php

@@ -0,0 +1,66 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Functions
+// ============================================================================
+function updateBludit() {
+	global $site;
+	global $syslog;
+
+	// New installation
+	if ($site->currentBuild()==0) {
+		$site->set(array('currentBuild'=>BLUDIT_BUILD));
+	}
+
+	// Check if Bludit need to be update
+	if ( ($site->currentBuild() < BLUDIT_BUILD) || isset($_GET['update']) ) {
+		Log::set('UPDATE SYSTEM - Starting.');
+
+		// Updates only for version less than Bludit v3.0 rc-3
+		if ($site->currentBuild()<='20180910') {
+			@mkdir(PATH_WORKSPACES, DIR_PERMISSIONS, true);
+			$plugins = array('simple-stats', 'pluginRSS', 'pluginSitemap', 'pluginTimeMachineX', 'pluginBackup');
+			foreach ($plugins as $plugin) {
+				if (pluginActivated($plugin)) {
+					Log::set('UPDATE SYSTEM - Re-enable plugin: '.$plugin);
+					deactivatePlugin($plugin);
+					activatePlugin($plugin);
+				}
+			}
+		}
+
+		// Updates only for version less than Bludit v3.1
+		if ($site->currentBuild()<='20180921') {
+			@mkdir(PATH_UPLOADS_PAGES, DIR_PERMISSIONS, true);
+			$site->set(array('imageRelativeToAbsolute'=>true, 'imageRestrict'=>false));
+		}
+
+		// Set the current build number
+		$site->set(array('currentBuild'=>BLUDIT_BUILD));
+		Log::set('UPDATE SYSTEM - Finished.');
+
+		// Add to syslog
+		$syslog->add(array(
+			'dictionaryKey'=>'system-updated',
+			'notes'=>'Bludit v'.BLUDIT_VERSION
+		));
+	}
+}
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Try update Bludit
+updateBludit();
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Dashboard');

bl-kernel/admin/controllers/developers.php

@@ -0,0 +1,51 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// This function is used on the VIEW to show the tables
+function printTable($title, $array) {
+	echo '<h2 class="mb-2 mt-4">'.$title.'</h2>';
+	echo '<table class="table table-striped mt-3">
+		<tbody>
+	';
+
+	foreach ($array as $key=>$value) {
+		if($value===false) { $value = 'false'; }
+		elseif($value===true) { $value = 'true'; }
+		echo '<tr>';
+		echo '<td>'.$key.'</td>';
+		if (is_array($value)) {
+			echo '<td>'.json_encode($value).'</td>';
+		} else {
+			echo '<td>'.Sanitize::html($value).'</td>';
+		}
+		echo '</tr>';
+	}
+
+	echo '
+		</tbody>
+		</table>
+	';
+}
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+$layout['title'] .= ' - '.$L->g('Developers');

bl-kernel/admin/controllers/edit-category.php

@@ -0,0 +1,44 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	if ($_POST['action']=='delete') {
+		deleteCategory($_POST);
+	} elseif ($_POST['action']=='edit') {
+		editCategory($_POST);
+	}
+
+	Redirect::page('categories');
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+$categoryKey = $layout['parameters'];
+
+if (!$categories->exists($categoryKey)) {
+	Log::set(__METHOD__.LOG_SEP.'Error occurred when trying to get the category: '.$categoryKey);
+	Redirect::page('categories');
+}
+
+$categoryMap = $categories->getMap($categoryKey);
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Edit Category').' [ '.$categoryMap['name'] . ' ] ';

bl-kernel/admin/controllers/edit-content.php

@@ -0,0 +1,86 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+if (checkRole(array('author'), false)) {
+	try {
+		$pageKey = isset($_POST['key']) ? $_POST['key'] : $layout['parameters'];
+		$page = new Page($pageKey);
+	} catch (Exception $e) {
+		Alert::set($L->g('You do not have sufficient permissions'));
+		Redirect::page('dashboard');
+	}
+
+	if ($page->username()!==$login->username()) {
+		// Add to syslog
+		$syslog->add(array(
+			'dictionaryKey'=>'access-denied',
+			'notes'=>$login->username()
+		));
+
+		Alert::set($L->g('You do not have sufficient permissions'));
+		Redirect::page('dashboard');
+	}
+}
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	if ($_POST['type']==='delete') {
+		if (deletePage($_POST['key'])) {
+			Alert::set( $L->g('The changes have been saved') );
+		}
+	} else {
+		$key = editPage($_POST);
+		if ($key!==false) {
+			Alert::set( $L->g('The changes have been saved') );
+			Redirect::page('edit-content/'.$key);
+		}
+	}
+
+	Redirect::page('content');
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+try {
+	$pageKey = $layout['parameters'];
+	$page = new Page($pageKey);
+} catch (Exception $e) {
+	Log::set(__METHOD__.LOG_SEP.'Error occurred when trying to get the page: '.$pageKey, LOG_TYPE_ERROR);
+	Redirect::page('content');
+}
+
+// Images prefix directory
+define('PAGE_IMAGES_KEY', $page->uuid());
+
+// Images and thubmnails directories
+if (IMAGE_RESTRICT) {
+	define('PAGE_IMAGES_DIRECTORY', (IMAGE_RELATIVE_TO_ABSOLUTE? '' : HTML_PATH_UPLOADS_PAGES.PAGE_IMAGES_KEY.'/'));
+	define('PAGE_IMAGES_URL', (IMAGE_RELATIVE_TO_ABSOLUTE? '' : DOMAIN_UPLOADS_PAGES.PAGE_IMAGES_KEY.'/'));
+	define('PAGE_THUMBNAILS_DIRECTORY', PATH_UPLOADS_PAGES.PAGE_IMAGES_KEY.DS.'thumbnails'.DS);
+	define('PAGE_THUMBNAILS_HTML', HTML_PATH_UPLOADS_PAGES.PAGE_IMAGES_KEY.'/thumbnails/');
+	define('PAGE_THUMBNAILS_URL', DOMAIN_UPLOADS_PAGES.PAGE_IMAGES_KEY.'/thumbnails/');
+} else {
+	define('PAGE_IMAGES_DIRECTORY', (IMAGE_RELATIVE_TO_ABSOLUTE? '' : HTML_PATH_UPLOADS));
+	define('PAGE_IMAGES_URL', (IMAGE_RELATIVE_TO_ABSOLUTE? '' : DOMAIN_UPLOADS));
+	define('PAGE_THUMBNAILS_DIRECTORY', PATH_UPLOADS_THUMBNAILS);
+	define('PAGE_THUMBNAILS_HTML', HTML_PATH_UPLOADS_THUMBNAILS);
+	define('PAGE_THUMBNAILS_URL', DOMAIN_UPLOADS_THUMBNAILS);
+}
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Edit content').' - '.$page->title();

bl-kernel/admin/controllers/edit-user.php

@@ -0,0 +1,60 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	// Prevent non-administrators to change other users
+	if ($login->role()!=='admin') {
+		$_POST['username'] = $login->username();
+		unset($_POST['role']);
+	}
+
+	if (isset($_POST['deleteUserAndDeleteContent']) && ($login->role()==='admin')) {
+		$_POST['deleteContent'] = true;
+		deleteUser($_POST);
+	} elseif (isset($_POST['deleteUserAndKeepContent']) && ($login->role()==='admin')) {
+		$_POST['deleteContent'] = false;
+		deleteUser($_POST);
+	} elseif (isset($_POST['disableUser']) && ($login->role()==='admin')) {
+		disableUser(array('username'=>$_POST['username']));
+	} else {
+		editUser($_POST);
+	}
+
+	Alert::set($L->g('The changes have been saved'));
+
+	if ($login->role()==='admin') {
+		Redirect::page('users');
+	}
+	Redirect::page('edit-user/'.$login->username());
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+$username = $layout['parameters'];
+
+// Prevent non-administrators to change other users
+if ($login->role()!=='admin') {
+	$username = $login->username();
+}
+
+try {
+	$user = new User($username);
+} catch (Exception $e) {
+	Redirect::page('users');
+}
+
+// Title of the page
+$layout['title'] = $L->g('Edit user').' - '.$layout['title'];

bl-kernel/admin/controllers/install-plugin.php

@@ -0,0 +1,39 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+$pluginClassName = $layout['parameters'];
+if (!activatePlugin($pluginClassName)) {
+	Log::set('Fail when try to activate the plugin.', LOG_TYPE_ERROR);
+}
+
+if (isset($plugins['all'][$pluginClassName])) {
+	$plugin = $plugins['all'][$pluginClassName];
+} else {
+	Redirect::page('plugins');
+}
+
+if (method_exists($plugin, 'form')) {
+	Redirect::page('configure-plugin/'.$pluginClassName);
+}
+
+Redirect::page('plugins#'.$pluginClassName);

bl-kernel/admin/controllers/install-theme.php

@@ -0,0 +1,30 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+$themeDirectory = $layout['parameters'];
+
+// Activate theme
+activateTheme($themeDirectory);
+
+// Redirect
+Redirect::page('themes');

bl-kernel/admin/controllers/login.php

@@ -0,0 +1,80 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+function checkLogin($args)
+{
+	global $security;
+	global $login;
+	global $L;
+
+	if ($security->isBlocked()) {
+		Alert::set($L->g('IP address has been blocked').'<br>'.$L->g('Try again in a few minutes'), ALERT_STATUS_FAIL);
+		return false;
+	}
+
+	if ($login->verifyUser($_POST['username'], $_POST['password'])) {
+		if (isset($_POST['remember'])) {
+			$login->setRememberMe($_POST['username']);
+		}
+		// Renew the token. This token will be the same inside the session for multiple forms.
+		$security->generateTokenCSRF();
+
+		if (isset($_GET['enableAPI'])) {
+			Redirect::page('api');
+		}
+		Redirect::page('dashboard');
+		return true;
+	}
+
+	// Bruteforce protection, add IP to the blacklist
+	$security->addToBlacklist();
+
+	// Create alert
+	Alert::set($L->g('Username or password incorrect'), ALERT_STATUS_FAIL);
+	return false;
+}
+
+function checkRememberMe()
+{
+	global $security;
+	global $login;
+
+	if ($security->isBlocked()) {
+		return false;
+	}
+
+	if ($login->verifyUserByRemember()) {
+		$security->generateTokenCSRF();
+		Redirect::page('dashboard');
+		return true;
+	}
+
+	return false;
+}
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD']!=='POST') {
+	checkRememberMe();
+}
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD']=='POST') {
+	checkLogin($_POST);
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================

bl-kernel/admin/controllers/logout.php

@@ -0,0 +1,25 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+if ($login->logout()) {
+	Redirect::admin();
+}

bl-kernel/admin/controllers/new-category.php

@@ -0,0 +1,32 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	if (createCategory($_POST)) {
+		Redirect::page('categories');
+	}
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('New category');

bl-kernel/admin/controllers/new-content.php

@@ -0,0 +1,52 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin', 'editor', 'author'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	createPage($_POST);
+	Redirect::page('content');
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// UUID of the page is need it for autosave and media manager
+$uuid = $pages->generateUUID();
+
+// Images prefix directory
+define('PAGE_IMAGES_KEY', $uuid);
+
+// Images and thubmnails directories
+if (IMAGE_RESTRICT) {
+	define('PAGE_IMAGES_DIRECTORY', (IMAGE_RELATIVE_TO_ABSOLUTE? '' : HTML_PATH_UPLOADS_PAGES.PAGE_IMAGES_KEY.'/'));
+	define('PAGE_IMAGES_URL', (IMAGE_RELATIVE_TO_ABSOLUTE? '' : DOMAIN_UPLOADS_PAGES.PAGE_IMAGES_KEY.'/'));
+	define('PAGE_THUMBNAILS_DIRECTORY', PATH_UPLOADS_PAGES.PAGE_IMAGES_KEY.DS.'thumbnails'.DS);
+	define('PAGE_THUMBNAILS_HTML', HTML_PATH_UPLOADS_PAGES.PAGE_IMAGES_KEY.'/thumbnails/');
+	define('PAGE_THUMBNAILS_URL', DOMAIN_UPLOADS_PAGES.PAGE_IMAGES_KEY.'/thumbnails/');
+} else {
+	define('PAGE_IMAGES_DIRECTORY', (IMAGE_RELATIVE_TO_ABSOLUTE? '' : HTML_PATH_UPLOADS));
+	define('PAGE_IMAGES_URL', (IMAGE_RELATIVE_TO_ABSOLUTE? '' : DOMAIN_UPLOADS));
+	define('PAGE_THUMBNAILS_DIRECTORY', PATH_UPLOADS_THUMBNAILS);
+	define('PAGE_THUMBNAILS_HTML', HTML_PATH_UPLOADS_THUMBNAILS);
+	define('PAGE_THUMBNAILS_URL', DOMAIN_UPLOADS_THUMBNAILS);
+}
+
+// Title of the page
+$layout['title'] = $L->g('New content').' - '.$layout['title'];

bl-kernel/admin/controllers/new-user.php

@@ -0,0 +1,32 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	if (createUser($_POST)) {
+		Redirect::page('users');
+	}
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Add a new user');

bl-kernel/admin/controllers/plugins-position.php

@@ -0,0 +1,29 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	changePluginsPosition(explode(',',$_POST['plugin-list']));
+	Redirect::page('plugins-position');
+}
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Plugins');

bl-kernel/admin/controllers/plugins.php

@@ -0,0 +1,26 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Plugins');

bl-kernel/admin/controllers/settings.php

@@ -0,0 +1,31 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	editSettings($_POST);
+	Redirect::page('settings');
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Advanced Settings');

bl-kernel/admin/controllers/themes.php

@@ -0,0 +1,24 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+$themes = buildThemes();
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Themes');

bl-kernel/admin/controllers/uninstall-plugin.php

@@ -0,0 +1,26 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+$pluginClassName = $layout['parameters'];
+deactivatePlugin($pluginClassName);
+Redirect::page('plugins');

bl-kernel/admin/controllers/user-password.php

@@ -0,0 +1,51 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	// Prevent non-administrators to change other users
+	$username = $_POST['username'];
+	if ($login->role()!=='admin') {
+	    $username = $login->username();
+	}
+
+	if (changeUserPassword(array(
+		'username'=>$username,
+		'newPassword'=>$_POST['newPassword'],
+		'confirmPassword'=>$_POST['confirmPassword']
+	))) {
+		if ($login->role()==='admin') {
+			Redirect::page('users');
+		}
+		Redirect::page('edit-user/'.$login->username());
+	}
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Prevent non-administrators to change other users
+if ($login->role()!=='admin') {
+	$layout['parameters'] = $login->username();
+}
+
+try {
+	$username = $layout['parameters'];
+	$user = new User($username);
+} catch (Exception $e) {
+	Redirect::page('users');
+}
+
+// Title of the page
+$layout['title'] = $L->g('Change password').' - '.$layout['title'];

bl-kernel/admin/controllers/users.php

@@ -0,0 +1,31 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Check role
+// ============================================================================
+
+checkRole(array('admin'));
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if( $_SERVER['REQUEST_METHOD'] == 'POST' )
+{
+	$site->set($_POST);
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================
+
+// Title of the page
+$layout['title'] .= ' - '.$L->g('Users');

bl-kernel/admin/themes/booty/css/bludit.bootstrap.css

@@ -0,0 +1,58 @@
+a {
+	color: #0078D4;
+}
+
+a:hover {
+	color: #003f6f;
+	text-decoration: none;
+}
+
+.bg-success {
+	background-color: #8BC34A!important;
+}
+
+.text-primary {
+	color: #0078D4!important;
+}
+
+.text-danger {
+	color: #D40000!important;
+}
+a.text-danger:focus,
+a.text-danger:hover {
+	color: #790000!important;
+}
+
+/* Buttons */
+.btn-primary {
+	background-color: #0078D4;
+	border-color: #0078D4;
+}
+
+.btn-primary:hover {
+	background-color: #4585CF;
+	border-color: #4a90e2;
+}
+
+.btn-light.focus, .btn-light:focus {
+	box-shadow: none;
+}
+
+.btn.focus, .btn:focus {
+	box-shadow: none;
+}
+
+/* Form */
+.form-control:focus {
+	box-shadow: none;
+}
+
+/* Tables */
+.table-striped tbody tr:nth-of-type(odd) {
+	background-color: rgba(0, 0, 0, 0.02);
+}
+
+.table thead th {
+	font-size: 0.8em;
+	text-transform: uppercase!important;
+}

bl-kernel/admin/themes/booty/css/bludit.css

@@ -0,0 +1,367 @@
+html {
+	height: 100%;
+	font-size: 0.9rem;
+	background: #fcfcfc;
+}
+
+body {
+	background: #fcfcfc;
+}
+
+/* Prevent events in iframes */
+/* iframe{
+	pointer-events: none;
+} */
+
+/*
+	ICONS
+*/
+.fa {
+	margin-right: .5rem !important;
+	line-height: inherit;
+}
+
+/*
+	SIDEBAR
+*/
+
+div.sidebar .nav-item a {
+	padding-left: 0;
+	padding-right: 0;
+	color: #555;
+	padding-top: 5px;
+	padding-bottom: 5px;
+}
+
+div.sidebar .nav-item a:hover {
+	color: #0078D4;
+}
+
+div.sidebar .nav-item h4 {
+	font-size: 1.2em;
+	text-transform: uppercase;
+	font-weight: 400;
+	margin-top: 10px;
+}
+
+/*
+	AUTOCOMPLETE SEARCH
+*/
+.search-suggestion {
+	padding: 5px;
+}
+
+.search-suggestion-options {
+	font-size: 0.9em;
+	padding-top: 2px;
+}
+
+/*
+	BOOTSTRAP Hacks
+*/
+
+@media (min-width: 1200px) {
+	.container {
+		max-width: 1250px;
+	}
+}
+
+/* for small devices */
+@media (max-width: 575.98px) {
+
+	#jsmediaManagerButton,
+	#jscategoryButton,
+	#jsdescriptionButton {
+		width: 100%;
+		text-align: left;
+	}
+}
+
+
+
+
+.btn-light {
+	color: #212529;
+	background-color: #f3f3f3;
+	border-color: #ced4d9;
+}
+
+.btn-form {
+	background-color: #F3F3F3;
+	border-color: #DDD;
+	color: #000;
+}
+
+.btn-form:hover {
+	background-color: rgb(228, 228, 228);
+	border-color: #DDD;
+	color: #000;
+}
+
+
+
+code {
+	padding: 3px 5px 2px;
+	margin: 0 1px;
+	background: #eaeaea;
+	background: rgba(0, 0, 0, .07);
+	color: #444;
+}
+
+.list-group-sortable {
+	cursor: pointer;
+}
+
+.modal-body {
+	padding: 2rem;
+}
+
+.modal-footer {
+	background-color: rgb(247, 247, 247);
+}
+
+.modal-dialog .btn-link {
+	color: #000;
+}
+
+/*
+	LOGIN
+*/
+
+body.login {
+	background: rgb(255, 255, 255);
+	background: linear-gradient(0deg, rgba(255, 255, 255, 1) 0%, rgba(250, 250, 250, 1) 53%);
+	height: 100%;
+}
+
+
+/*
+	DASHBOARD
+*/
+
+#dashboard ul.list-group.list-group-striped li {
+	border: none;
+	word-break: break-word;
+	text-overflow: ellipsis;
+	overflow: hidden;
+	white-space: nowrap;
+}
+
+#dashboard ul.list-group.list-group-striped li:nth-of-type(even) {
+	background: #f1f1f1;
+
+}
+
+#dashboard div.quick-links-icons {
+	font-size: 3em;
+	width: 100%;
+}
+
+#dashboard a.quick-links {
+	color: #777;
+}
+
+#dashboard a.quick-links:hover {
+	text-decoration: none;
+	color: #4586d4;
+}
+
+#hello-message {
+	padding: 10px 0;
+	margin-bottom: 20px;
+}
+
+#hello-message span.oi {
+	top: 3px;
+}
+
+.ct-series-a .ct-line {
+	/* Set the colour of this series line */
+	stroke: #4a90e2;
+	/* Control the thikness of your lines */
+	stroke-width: 2px;
+	/* Create a dashed line with a pattern */
+}
+
+.ct-series-a .ct-point {
+	/* Colour of your points */
+	stroke: #4a90e2;
+	/* Size of your points */
+	stroke-width: 8px;
+}
+
+/*
+	ALERT
+*/
+
+#alert {
+	display: none;
+	position: fixed;
+	text-align: center;
+	border-radius: 0px;
+	border: 0;
+	z-index: 1000;
+	bottom: 0;
+	right: 0;
+	margin: 0;
+}
+
+.alert-success {
+	background-color: #4586d4;
+	border-left: 6px solid #abd1ff !important;
+	color: #ffffff;
+}
+
+.alert-danger {
+	background-color: #d44545;
+	border-left: 6px solid #ff9c9c !important;
+	color: #ffffff;
+}
+
+
+
+/*
+	PLUGINS
+*/
+
+.plugin-form label {
+	display: block;
+	margin-top: 1rem !important;
+}
+
+.plugin-form input[type="text"],
+.plugin-form textarea,
+.plugin-form select {
+	display: block;
+	width: 100%;
+	padding: .375rem .75rem;
+	font-size: 1rem;
+	line-height: 1.5;
+	color: #495057;
+	background-color: #fff;
+	background-clip: padding-box;
+	border: 1px solid #ced4da;
+	border-radius: .25rem;
+	transition: border-color .15s ease-in-out, box-shadow .15s ease-in-out;
+}
+
+.plugin-form textarea {
+	min-height: 120px;
+}
+
+.plugin-form span.tip {
+	display: block;
+	font-size: 80%;
+	font-weight: 400;
+	margin-top: .25rem;
+	color: #6c757d !important;
+}
+
+/*
+	Manage > Content
+*/
+
+td.child {
+	padding-left: 30px;
+}
+
+/*
+	Manage > New Content
+*/
+
+#jseditor {
+	background: #fff;
+	padding: 10px 5% !important;
+	font-size: 16px;
+	line-height: 1.5em;
+	border: 1px solid #ced4da;
+}
+
+#jseditorSidebar {
+	display: none;
+	height: calc(100% - 45px);
+	width: 50%;
+	max-width: 350px;
+	position: absolute;
+	z-index: 50;
+	top: 45px;
+	right: 15px;
+	background-color: #fff;
+	overflow-x: hidden;
+	transition: 0.5s;
+	border-left: 1px solid #ccc;
+	border-right: 1px solid #ccc;
+	border-top: 1px solid #ccc;
+}
+
+@media (max-width: 575.98px) {
+	#jseditorSidebar {
+		width: 100%;
+		max-width: 100%;
+		right: 0;
+	}
+
+	#jseditorToolbarRight button {
+		font-size: 0px !important;
+	}
+
+	#jseditorToolbarRight button span {
+		font-size: 16px !important;
+	}
+
+	.contentTools .btn {
+		font-size: 0px !important;
+		margin-right: 5px;
+	}
+
+	.contentTools .btn span {
+		font-size: 16px !important;
+	}
+}
+
+#jseditorSidebar nav {
+	background: #f3f3f3;
+}
+
+#jseditorSidebar nav a {
+	color: #000;
+}
+
+#jseditorSidebar .nav-tabs .nav-link {
+	border: none;
+}
+
+#jseditorSidebar .nav-link.active {
+	background: none;
+	border: none;
+	border-bottom: 3px solid #ccc;
+}
+
+#jsshadow {
+	position: absolute;
+	top: 0;
+	right: 0;
+	bottom: 0;
+	left: 0;
+	background-color: rgba(72, 72, 72, 0.7);
+	z-index: 10;
+	display: none;
+}
+
+img.profilePicture {
+	width: 30px;
+	height: 30px;
+	border-radius: 30px;
+	border: 1px solid #ccc;
+}
+
+/* Switch button */
+.switch-button {
+	font-size: 0.9em;
+	text-transform: uppercase;
+	cursor: pointer;
+}
+
+.switch-icon-publish {
+	color: #1cb11c;
+}

bl-kernel/admin/themes/booty/html/alert.php

@@ -0,0 +1,17 @@
+<script charset="utf-8">
+	function showAlert(text) {
+		console.log("[INFO] Function showAlert() called.");
+		$("#alert").html(text);
+		$("#alert").slideDown().delay(<?php echo ALERT_DISAPPEAR_IN*1000 ?>).slideUp();
+	}
+
+	<?php if (Alert::defined()): ?>
+	setTimeout(function(){ showAlert("<?php echo Alert::get() ?>") }, 500);
+	<?php endif; ?>
+
+	$(window).click(function() {
+		$("#alert").hide();
+	});
+</script>
+
+<div id="alert" class="alert <?php echo (Alert::status()==ALERT_STATUS_FAIL)?'alert-danger':'alert-success' ?>"></div>

bl-kernel/admin/themes/booty/html/media.php

@@ -0,0 +1,262 @@
+<?php
+// Preload the first 10 files to not call via AJAX when the user open the first time the media manager
+$listOfFilesByPage = Filesystem::listFiles(PAGE_THUMBNAILS_DIRECTORY, '*', '*', MEDIA_MANAGER_SORT_BY_DATE, MEDIA_MANAGER_NUMBER_OF_FILES);
+$preLoadFiles = array();
+if (!empty($listOfFilesByPage[0])) {
+	foreach ($listOfFilesByPage[0] as $file) {
+		$filename = Filesystem::filename($file);
+		array_push($preLoadFiles, $filename);
+	}
+}
+
+// Amount of pages for the paginator
+$numberOfPages = count($listOfFilesByPage);
+?>
+
+<div id="jsmediaManagerModal" class="modal" tabindex="-1" role="dialog">
+<div class="modal-dialog modal-lg">
+<div class="modal-content">
+<div class="container-fluid">
+<div class="row">
+	<div class="col p-3">
+
+	<!--
+		UPLOAD INPUT
+	-->
+		<h3 class="mt-2 mb-3"><i class="fa fa-image"></i> <?php $L->p('Images'); ?></h3>
+
+		<div id="jsalertMedia" class="alert alert-warning d-none" role="alert"></div>
+
+		<!-- Form and Input file -->
+		<form name="bluditFormUpload" id="jsbluditFormUpload" enctype="multipart/form-data">
+			<div class="custom-file">
+				<input type="file" class="custom-file-input" id="jsimages" name="images[]" multiple>
+				<label class="custom-file-label" for="jsimages"><?php $L->p('Choose images to upload'); ?></label>
+			</div>
+		</form>
+
+		<!-- Progress bar -->
+		<div class="progress mt-3">
+			<div id="jsbluditProgressBar" class="progress-bar bg-primary" role="progressbar" style="width:0%"></div>
+		</div>
+
+	<!--
+		IMAGES LIST
+	-->
+		<!-- Table for list files -->
+		<table id="jsbluditMediaTable" class="table mt-3">
+			<tr>
+				<td><?php $L->p('There are no images'); ?></td>
+			</tr>
+		</table>
+
+		<!-- Paginator -->
+		<nav id="jsbluditMediaTablePagination"></nav>
+
+	</div>
+</div>
+</div>
+</div>
+</div>
+</div>
+
+<script>
+
+<?php
+echo 'var preLoadFiles = '.json_encode($preLoadFiles).';';
+?>
+
+function openMediaManager() {
+	$('#jsmediaManagerModal').modal('show');
+}
+
+function closeMediaManager() {
+	$('#jsmediaManagerModal').modal('hide');
+}
+
+// Remove all files from the table
+function cleanTable() {
+	$('#jsbluditMediaTable').empty();
+}
+
+function showMediaAlert(message) {
+	$("#jsalertMedia").html(message).removeClass('d-none');
+}
+
+function hideMediaAlert() {
+	$("#jsalertMedia").addClass('d-none');
+}
+
+// Show the files in the table
+function displayFiles(files, numberOfPages = <?= $numberOfPages ?>) {
+	if (!Array.isArray(files)) {
+		return false;
+	}
+
+	// Clean table
+	cleanTable();
+
+	// Regenerate the table
+	if (files.length > 0) {
+		$.each(files, function(key, filename) {
+			var thumbnail = "<?php echo PAGE_THUMBNAILS_URL; ?>"+filename;
+			var image = "<?php echo PAGE_IMAGES_URL; ?>"+filename;
+
+			tableRow = '<tr id="js'+filename+'">'+
+					'<td style="width:80px"><img class="img-thumbnail" alt="200x200" src="'+thumbnail+'" style="width: 50px; height: 50px;"><\/td>'+
+					'<td class="information">'+
+						'<div class="text-secondary pb-2">'+filename+'<\/div>'+
+						'<div>'+
+							'<a href="#" class="mr-3 text-primary" onClick="editorInsertMedia(\''+image+'\'); closeMediaManager();"><i class="fa fa-plus-circle"></i><?php $L->p('Insert') ?><\/a>'+
+							'<a href="#" class="mr-3 text-primary" onClick="editorInsertMedia(\''+thumbnail+'\'); closeMediaManager();"><i class="fa fa-image"></i><?php $L->p('Insert thumbnail') ?><\/a>'+
+							'<a href="#" class="mr-3 text-primary" onClick="editorInsertLinkedMedia(\''+thumbnail+'\',\''+image+'\'); closeMediaManager();"><i class="fa fa-link"></i><?php $L->p('Insert linked thumbnail') ?><\/a>'+
+							'<a href="#" class="text-primary" onClick="setCoverImage(\''+filename+'\'); closeMediaManager();"><i class="fa fa-desktop"></i><?php $L->p('Set as cover image') ?><\/button>'+
+							'<a href="#" class="float-right text-danger" onClick="deleteMedia(\''+filename+'\')"><i class="fa fa-trash-o"></i><?php $L->p('Delete') ?><\/a>'+
+						'<\/div>'+
+					'<\/td>'+
+				'<\/tr>';
+			$('#jsbluditMediaTable').append(tableRow);
+		});
+
+		mediaPagination = '<ul class="pagination justify-content-center flex-wrap">';
+		for (var i = 1; i <= numberOfPages; i++) {
+			mediaPagination += '<li class="page-item"><button type="button" class="btn btn-link page-link" onClick="getFiles('+i+')">'+i+'</button></li>';
+		}
+		mediaPagination += '</ul>';
+		$('#jsbluditMediaTablePagination').html(mediaPagination);
+
+	}
+
+	if (files.length == 0) {
+		$('#jsbluditMediaTable').html("<p><?php (IMAGE_RESTRICT ? $L->p('There are no images for the page') : $L->p('There are no images')) ?></p>");
+		$('#jsbluditMediaTablePagination').html('');
+	}
+}
+
+// Get the list of files via AJAX, filter by the page number
+function getFiles(pageNumber) {
+	$.post(HTML_PATH_ADMIN_ROOT+"ajax/list-images",
+		{ 	tokenCSRF: tokenCSRF,
+			pageNumber: pageNumber,
+			uuid: "<?php echo PAGE_IMAGES_KEY ?>",
+			path: "thumbnails" // the paths are defined in ajax/list-images
+		},
+		function(data) { // success function
+			if (data.status==0) {
+				displayFiles(data.files, data.numberOfPages);
+			} else {
+				console.log(data.message);
+			}
+		}
+	);
+}
+
+// Delete the file and the thumbnail if exist
+function deleteMedia(filename) {
+	$.post(HTML_PATH_ADMIN_ROOT+"ajax/delete-image",
+		{ 	tokenCSRF: tokenCSRF,
+			filename: filename,
+			uuid: "<?php echo PAGE_IMAGES_KEY; ?>"
+		},
+		function(data) { // success function
+			if (data.status==0) {
+				getFiles(1);
+			} else {
+				console.log(data.message);
+			}
+		}
+	);
+}
+
+function setCoverImage(filename) {
+	var image = "<?php echo PAGE_IMAGES_URL; ?>"+filename;
+	$("#jscoverImage").val(filename);
+	$("#jscoverImagePreview").attr("src", image);
+}
+
+function uploadImages() {
+	// Remove current alerts
+	hideMediaAlert();
+
+	var images = $("#jsimages")[0].files;
+	for (var i=0; i < images.length; i++) {
+		// Check file type/extension
+		const validImageTypes = ['image/gif', 'image/jpeg', 'image/png', 'image/svg+xml', 'image/webp'];
+		if (!validImageTypes.includes(images[i].type)) {
+			showMediaAlert("<?php echo $L->g('File type is not supported. Allowed types:').' '.implode(', ',$GLOBALS['ALLOWED_IMG_EXTENSION']) ?>");
+			return false;
+		}
+
+		// Check file size and compare with PHP upload_max_filesize
+		if (images[i].size > UPLOAD_MAX_FILESIZE) {
+			showMediaAlert("<?php echo $L->g('Maximum load file size allowed:').' '.ini_get('upload_max_filesize') ?>");
+			return false;
+		}
+	};
+
+	// Clean progress bar
+	$("#jsbluditProgressBar").removeClass().addClass("progress-bar bg-primary");
+	$("#jsbluditProgressBar").width("0");
+
+	// Data to send via AJAX
+	var formData = new FormData($("#jsbluditFormUpload")[0]);
+	formData.append("uuid", "<?php echo PAGE_IMAGES_KEY ?>");
+	formData.append("tokenCSRF", tokenCSRF);
+
+	$.ajax({
+		url: HTML_PATH_ADMIN_ROOT+"ajax/upload-images",
+		type: "POST",
+		data: formData,
+		cache: false,
+		contentType: false,
+		processData: false,
+		xhr: function() {
+			var xhr = $.ajaxSettings.xhr();
+			if (xhr.upload) {
+				xhr.upload.addEventListener("progress", function(e) {
+					if (e.lengthComputable) {
+						var percentComplete = (e.loaded / e.total)*100;
+						$("#jsbluditProgressBar").width(percentComplete+"%");
+					}
+				}, false);
+			}
+			return xhr;
+		}
+	}).done(function(data) {
+		if (data.status==0) {
+			$("#jsbluditProgressBar").removeClass("bg-primary").addClass("bg-success");
+			// Get the files for the first page, this include the files uploaded
+			getFiles(1);
+		} else {
+			$("#jsbluditProgressBar").removeClass("bg-primary").addClass("bg-danger");
+			showMediaAlert(data.message);
+		}
+	});
+}
+
+$(document).ready(function() {
+	// Display the files preloaded for the first time
+	displayFiles(preLoadFiles);
+
+	// Select image event
+	$("#jsimages").on("change", function(e) {
+		uploadImages();
+	});
+
+	// Drag and drop image
+	$(window).on("dragover dragenter", function(e) {
+		e.preventDefault();
+		e.stopPropagation();
+		openMediaManager();
+	});
+
+	// Drag and drop image
+	$(window).on("drop", function(e) {
+		e.preventDefault();
+		e.stopPropagation();
+		$("#jsimages").prop("files", e.originalEvent.dataTransfer.files);
+		uploadImages();
+	});
+});
+
+</script>

bl-kernel/admin/themes/booty/html/navbar.php

@@ -0,0 +1,77 @@
+<nav class="navbar navbar-expand-lg navbar-dark bg-dark text-uppercase d-block d-lg-none">
+	<div class="container">
+		<span class="navbar-brand">
+			<?php echo (defined('BLUDIT_PRO'))?'BLUDIT PRO':'BLUDIT' ?></span>
+		<button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarNav" aria-controls="navbarNav" aria-expanded="false"
+		 aria-label="Toggle navigation">
+			<span class="navbar-toggler-icon"></span>
+		</button>
+		<div class="collapse navbar-collapse" id="navbarNav">
+			<ul class="navbar-nav">
+				<li class="nav-item">
+					<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'dashboard' ?>">
+						<?php $L->p('Dashboard') ?></a>
+				</li>
+				<li class="nav-item">
+					<a class="nav-link" href="<?php echo HTML_PATH_ROOT ?>">
+						<?php $L->p('Website') ?></a>
+				</li>
+				<li class="nav-item">
+					<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'new-content' ?>">
+						<?php $L->p('New content') ?></a>
+				</li>
+				<li class="nav-item">
+					<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'content' ?>">
+						<?php $L->p('Content') ?></a>
+				</li>
+				<?php if (!checkRole(array('admin'),false)): ?>
+				    <li class="nav-item">
+					<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'edit-user/'.$login->username() ?>">
+					    <?php $L->p('Profile') ?></a>
+				    </li>
+				<?php endif; ?>
+				<?php if (checkRole(array('admin'),false)): ?>
+						<li class="nav-item">
+							<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'categories' ?>">
+								<?php $L->p('Categories') ?></a>
+						</li>
+						<li class="nav-item">
+							<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'users' ?>">
+								<?php $L->p('Users') ?></a>
+						</li>
+						<li class="nav-item">
+							<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'settings' ?>">
+								<?php $L->p('Settings') ?></a>
+						</li>
+						<li class="nav-item">
+							<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'plugins' ?>">
+								<?php $L->p('Plugins') ?></a>
+						</li>
+						<li class="nav-item">
+							<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'themes' ?>">
+								<?php $L->p('Themes') ?></a>
+						</li>
+						<li class="nav-item">
+							<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'about' ?>">
+								<?php $L->p('About') ?></a>
+						</li>
+				<?php endif; ?>
+				<?php if (checkRole(array('admin'),false)): ?>
+				    <?php
+				    if (!empty($plugins['adminSidebar'])) {
+					foreach ($plugins['adminSidebar'] as $pluginSidebar) {
+					    echo '<li class="nav-item">';
+					    echo $pluginSidebar->adminSidebar();
+					    echo '</li>';
+					}
+				    }
+				    ?>
+				<?php endif; ?>
+				<li class="nav-item">
+					<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'logout' ?>">
+						<?php $L->p('Logout') ?></a>
+				</li>
+			</ul>
+		</div>
+	</div>
+</nav>

bl-kernel/admin/themes/booty/html/sidebar.php

@@ -0,0 +1,80 @@
+<!-- Use .flex-column to set a vertical direction -->
+<ul class="nav flex-column pt-4">
+
+	<li class="nav-item mb-4" style="margin-left: -4px;">
+		<img src="<?php echo HTML_PATH_CORE_IMG ?>logo.svg" width="20" height="20" alt="bludit-logo"><span class="ml-2 align-middle"><?php echo (defined('BLUDIT_PRO'))?'BLUDIT PRO':'BLUDIT' ?></span>
+	</li>
+
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'dashboard' ?>"><span class="fa fa-dashboard"></span><?php $L->p('Dashboard') ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" target="_blank" href="<?php echo HTML_PATH_ROOT ?>"><span class="fa fa-home"></span><?php $L->p('Website') ?></a>
+	</li>
+
+	<li class="nav-item mt-3">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'new-content' ?>"><span style="color: #0078D4;" class="fa fa-plus-circle"></span><?php $L->p('New content') ?></a>
+	</li>
+
+	<?php if (!checkRole(array('admin'),false)): ?>
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'content' ?>"><span class="fa fa-archive"></span><?php $L->p('Content') ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'edit-user/'.$login->username() ?>"><span class="fa fa-user"></span><?php $L->p('Profile') ?></a>
+	</li>
+	<?php endif; ?>
+
+	<?php if (checkRole(array('admin'),false)): ?>
+
+	<li class="nav-item mt-3">
+		<h4><?php $L->p('Manage') ?></h4>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'content' ?>"><span class="fa fa-folder"></span><?php $L->p('Content') ?></a>
+	</li>
+
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'categories' ?>"><span class="fa fa-bookmark"></span><?php $L->p('Categories') ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'users' ?>"><span class="fa fa-users"></span><?php $L->p('Users') ?></a>
+	</li>
+
+	<li class="nav-item mt-3">
+		<h4><?php $L->p('Settings') ?></h4>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'settings' ?>"><span class="fa fa-gear"></span><?php $L->p('General') ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'plugins' ?>"><span class="fa fa-puzzle-piece"></span><?php $L->p('Plugins') ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'themes' ?>"><span class="fa fa-desktop"></span><?php $L->p('Themes') ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'about' ?>"><span class="fa fa-info"></span><?php $L->p('About') ?></a>
+	</li>
+
+	<?php endif; ?>
+
+	<?php if (checkRole(array('admin', 'editor'),false)): ?>
+
+		<?php
+			if (!empty($plugins['adminSidebar'])) {
+				echo '<li class="nav-item"><hr></li>';
+				foreach ($plugins['adminSidebar'] as $pluginSidebar) {
+					echo '<li class="nav-item">';
+					echo $pluginSidebar->adminSidebar();
+					echo '</li>';
+				}
+			}
+		?>
+
+	<?php endif; ?>
+
+	<li class="nav-item mt-5">
+		<a class="nav-link" href="<?php echo HTML_PATH_ADMIN_ROOT.'logout' ?>"><span class="fa fa-arrow-circle-right"></span><?php $L->p('Logout') ?></a>
+	</li>
+</ul>

bl-kernel/admin/themes/booty/index.php

@@ -0,0 +1,98 @@
+<!DOCTYPE html>
+<html>
+<head>
+	<title><?php echo $layout['title'] ?></title>
+	<meta charset="<?php echo CHARSET ?>">
+	<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
+	<meta name="robots" content="noindex,nofollow">
+	<meta name="generator" content="Bludit">
+
+	<!-- Favicon -->
+	<link rel="shortcut icon" type="image/x-icon" href="<?php echo HTML_PATH_CORE_IMG.'favicon.png?version='.BLUDIT_VERSION ?>">
+
+	<!-- CSS -->
+	<?php
+		echo Theme::cssBootstrap();
+		echo Theme::cssLineAwesome();
+		echo Theme::css(array(
+			'bludit.css',
+			'bludit.bootstrap.css'
+		), DOMAIN_ADMIN_THEME_CSS);
+		echo Theme::css(array(
+			'jquery.datetimepicker.min.css',
+			'select2.min.css',
+			'select2-bootstrap4.min.css'
+		), DOMAIN_CORE_CSS);
+	?>
+
+	<!-- Javascript -->
+	<?php
+		echo Theme::jquery();
+		echo Theme::jsBootstrap();
+		echo Theme::jsSortable();
+		echo Theme::js(array(
+			'jquery.datetimepicker.full.min.js',
+			'select2.full.min.js',
+			'functions.js'
+		), DOMAIN_CORE_JS, null);
+	?>
+
+	<!-- Plugins -->
+	<?php Theme::plugins('adminHead') ?>
+
+</head>
+<body class="h-100">
+
+<!-- Plugins -->
+<?php Theme::plugins('adminBodyBegin') ?>
+
+<!-- Javascript dynamic generated by PHP -->
+<?php
+	echo '<script charset="utf-8">'.PHP_EOL;
+	include(PATH_CORE_JS.'variables.php');
+	echo '</script>'.PHP_EOL;
+
+	echo '<script charset="utf-8">'.PHP_EOL;
+	include(PATH_CORE_JS.'bludit-ajax.php');
+	echo '</script>'.PHP_EOL;
+?>
+
+<!-- Overlay background -->
+<div id="jsshadow"></div>
+
+<!-- Alert -->
+<?php include('html/alert.php'); ?>
+
+<!-- Navbar, only for small devices -->
+<?php include('html/navbar.php'); ?>
+
+<div class="container h-100">
+	<!-- 25%/75% split on large devices, small, medium devices hide -->
+	<div class="row h-100">
+
+		<!-- LEFT SIDEBAR - Display only on large devices -->
+		<div class="sidebar col-lg-2 d-none d-lg-block">
+		<?php include('html/sidebar.php'); ?>
+		</div>
+
+		<!-- RIGHT MAIN -->
+		<div class="col-lg-10 pt-3 pb-1 h-100">
+		<?php
+			if (Sanitize::pathFile(PATH_ADMIN_VIEWS, $layout['view'].'.php')) {
+				include(PATH_ADMIN_VIEWS.$layout['view'].'.php');
+			} elseif ($layout['plugin'] && method_exists($layout['plugin'], 'adminView')) {
+				echo $layout['plugin']->adminView();
+			} else {
+				echo '<h1 class="text-center">'.$L->g('Page not found').'</h1>';
+				echo '<h2 class="text-center">'.$L->g('Choose a page from the sidebar.').'</h2>';
+			}
+		?>
+		</div>
+	</div>
+</div>
+
+<!-- Plugins -->
+<?php Theme::plugins('adminBodyEnd') ?>
+
+</body>
+</html>

bl-kernel/admin/themes/booty/init.php

@@ -0,0 +1,403 @@
+<?php
+
+class Bootstrap
+{
+
+	public static function modal($args)
+	{
+
+		$buttonSecondary = $args['buttonSecondary'];
+		$buttonSecondaryClass = $args['buttonSecondaryClass'];
+
+		$buttonPrimary = $args['buttonPrimary'];
+		$buttonPrimaryClass = $args['buttonPrimaryClass'];
+
+		$modalText = $args['modalText'];
+		$modalTitle = $args['modalTitle'];
+		$modalId = $args['modalId'];
+
+
+		return <<<EOF
+<div id="$modalId" class="modal fade" tabindex="-1" role="dialog">
+	<div class="modal-dialog" role="document">
+		<div class="modal-content">
+			<div class="modal-body">
+				<h3>$modalTitle</h3>
+				<p>$modalText</p>
+			</div>
+			<div class="modal-footer">
+				<button type="button" class="btn $buttonSecondaryClass" data-dismiss="modal">$buttonSecondary</button>
+				<button type="button" class="btn $buttonPrimaryClass">$buttonPrimary</button>
+			</div>
+		</div>
+	</div>
+</div>
+EOF;
+	}
+
+	public static function link($args)
+	{
+		$options = 'href="' . $args['href'] . '"';
+		if (isset($args['class'])) {
+			$options .= ' class="' . $args['class'] . '"';
+		}
+		if (isset($args['target'])) {
+			$options .= ' target="' . $args['target'] . '"';
+		}
+
+		if (isset($args['icon'])) {
+			return '<a ' . $options . '><span class="fa fa-' . $args['icon'] . '"></span>' . $args['title'] . '</a>';
+		}
+
+		return '<a ' . $options . '>' . $args['title'] . '</a>';
+	}
+
+	public static function pageTitle($args)
+	{
+		$icon = $args['icon'];
+		$title = $args['title'];
+		return <<<EOF
+<h2 class="mt-0 mb-3">
+	<span class="fa fa-$icon" style="font-size: 0.9em;"></span><span>$title</span>
+</h2>
+EOF;
+	}
+
+	public static function formOpen($args)
+	{
+		$class = empty($args['class']) ? '' : 'class="' . $args['class'] . '"';
+		$id = empty($args['id']) ? '' : 'id="' . $args['id'] . '"';
+		$enctype = empty($args['enctype']) ? '' : 'enctype="' . $args['enctype'] . '"';
+		$action = empty($args['action']) ? 'action=""' : 'action="' . $args['action'] . '"';
+		$method = empty($args['method']) ? 'method="post"' : 'method="' . $args['method'] . '"';
+		$style = empty($args['style']) ? '' : 'style="' . $args['style'] . '"';
+
+		return <<<EOF
+<form $class $enctype $id $method $action $style autocomplete="off">
+EOF;
+	}
+
+	public static function formClose()
+	{
+		return <<<EOF
+</form>
+<script>
+$(document).ready(function() {
+	// Prevent the form submit when press enter key.
+	$("form").keypress(function(e) {
+		if ((e.which == 13) && (e.target.type !== "textarea")) {
+			return false;
+		}
+	});
+});
+</script>
+EOF;
+	}
+
+	public static function formTitle($args)
+	{
+		$title = $args['title'];
+		return <<<EOF
+<h6 class="mt-4 mb-2 pb-2 border-bottom text-uppercase">$title</h6>
+EOF;
+	}
+
+	public static function formInputTextBlock($args)
+	{
+		$name = $args['name'];
+		$disabled = empty($args['disabled']) ? '' : 'disabled';
+		$placeholder = isset($args['placeholder']) ? $args['placeholder'] : '';
+		$value = isset($args['value']) ? $args['value'] : '';
+
+		$id = 'js' . $name;
+		if (isset($args['id'])) {
+			$id = $args['id'];
+		}
+
+		$tip = '';
+		if (!empty($args['tip'])) {
+			$tip = '<small class="form-text text-muted">' . $args['tip'] . '</small>';
+		}
+
+		$class = 'form-group m-0';
+		if (isset($args['class'])) {
+			$class = $args['class'];
+		}
+
+		$labelClass = 'mt-4 mb-2 pb-2 border-bottom text-uppercase w-100';
+		if (isset($args['labelClass'])) {
+			$labelClass = $args['labelClass'];
+		}
+
+		$label = '';
+		if (!empty($args['label'])) {
+			$label = '<label class="' . $labelClass . '" for="' . $id . '">' . $args['label'] . '</label>';
+		}
+
+		$type = 'text';
+		if (isset($args['type'])) {
+			$type = $args['type'];
+		}
+
+		return <<<EOF
+<div class="$class">
+	$label
+	<input type="text" dir="auto" value="$value" class="form-control" id="$id" name="$name" placeholder="$placeholder" $disabled>
+	$tip
+</div>
+EOF;
+	}
+
+	public static function formInputFile($args)
+	{
+		$id = 'js' . $args['name'];
+		if (isset($args['id'])) {
+			$id = $args['id'];
+		}
+
+		$class = 'custom-file';
+		if (isset($args['class'])) {
+			$class = $class . ' ' . $args['class'];
+		}
+
+		$html  = '<div class="' . $class . '">';
+		$html .= '<input type="file" class="custom-file-input" id="' . $id . '">';
+		$html .= '<label class="custom-file-label" for="' . $id . '">' . $args['label'] . '</label>';
+		$html .= '</div>';
+
+		return $html;
+	}
+
+	public static function formTextarea($args)
+	{
+		$id = 'js' . $args['name'];
+		if (isset($args['id'])) {
+			$id = $args['id'];
+		}
+
+		$class = 'form-control';
+		if (isset($args['class'])) {
+			$class = $class . ' ' . $args['class'];
+		}
+
+		$html = '<div class="form-group row">';
+
+		if (!empty($args['label'])) {
+			$html .= '<label for="' . $id . '" class="col-sm-2 col-form-label">' . $args['label'] . '</label>';
+		}
+
+		$html .= '<div class="col-sm-10">';
+		$html .= '<textarea class="' . $class . '" id="' . $id . '" name="' . $args['name'] . '" rows="' . $args['rows'] . '" placeholder="' . $args['placeholder'] . '">' . $args['value'] . '</textarea>';
+		if (isset($args['tip'])) {
+			$html .= '<small class="form-text text-muted">' . $args['tip'] . '</small>';
+		}
+		$html .= '</div>';
+		$html .= '</div>';
+
+		return $html;
+	}
+
+	public static function formTextareaBlock($args)
+	{
+		$id = 'js' . $args['name'];
+		if (isset($args['id'])) {
+			$id = $args['id'];
+		}
+
+		$class = 'form-control';
+		if (!empty($args['class'])) {
+			$class = $class . ' ' . $args['class'];
+		}
+
+		$html = '<div class="form-group m-0">';
+		if (!empty($args['label'])) {
+			$html .= '<label class="mt-4 mb-2 pb-2 border-bottom text-uppercase w-100" for="' . $id . '">' . $args['label'] . '</label>';
+		}
+
+		$html .= '<textarea class="' . $class . '" id="' . $id . '" name="' . $args['name'] . '" rows="' . $args['rows'] . '" placeholder="' . $args['placeholder'] . '">' . $args['value'] . '</textarea>';
+		if (!empty($args['tip'])) {
+			$html .= '<small class="form-text text-muted">' . $args['tip'] . '</small>';
+		}
+		$html .= '</div>';
+
+		return $html;
+	}
+
+	public static function formInputText($args)
+	{
+		$name = $args['name'];
+		$disabled = empty($args['disabled']) ? '' : 'disabled';
+		$readonly = empty($args['readonly']) ? '' : 'readonly';
+		$placeholder = isset($args['placeholder']) ? $args['placeholder'] : '';
+		$value = isset($args['value']) ? $args['value'] : '';
+
+		$id = 'js' . $name;
+		if (isset($args['id'])) {
+			$id = $args['id'];
+		}
+
+		$tip = '';
+		if (isset($args['tip'])) {
+			$tip = '<small class="form-text text-muted">' . $args['tip'] . '</small>';
+		}
+
+		$label = '';
+		if (isset($args['label'])) {
+			$label = '<label for="' . $id . '" class="col-sm-2 col-form-label">' . $args['label'] . '</label>';
+		}
+
+		$class = 'form-control';
+		if (isset($args['class'])) {
+			$class = $class . ' ' . $args['class'];
+		}
+
+		$type = 'text';
+		if (isset($args['type'])) {
+			$type = $args['type'];
+		}
+
+		return <<<EOF
+<div class="form-group row">
+	$label
+	<div class="col-sm-10">
+		<input class="$class" id="$id" name="$name" value="$value" placeholder="$placeholder" type="$type" dir="auto" $disabled $readonly>
+		$tip
+	</div>
+</div>
+EOF;
+	}
+
+	public static function formCheckbox($args)
+	{
+		$labelForCheckbox = isset($args['labelForCheckbox']) ? $args['labelForCheckbox'] : '';
+		$placeholder = isset($args['placeholder']) ? $args['placeholder'] : '';
+		$tip = isset($args['tip']) ? '<small class="form-text text-muted">' . $args['tip'] . '</small>' : '';
+		$value = isset($args['value']) ? $args['value'] : '';
+		$name = $args['name'];
+		$id = 'js' . $name;
+		if (isset($args['id'])) {
+			$id = $args['id'];
+		}
+		$disabled = isset($args['disabled']) ? 'disabled' : '';
+
+		$class = 'form-group m-0';
+		if (isset($args['class'])) {
+			$class = $args['class'];
+		}
+
+		$labelClass = 'mt-4 mb-2 pb-2 border-bottom text-uppercase w-100';
+		if (isset($args['labelClass'])) {
+			$labelClass = $args['labelClass'];
+		}
+
+		$type = 'text';
+		if (isset($args['type'])) {
+			$type = $args['type'];
+		}
+
+		$label = '';
+		if (!empty($args['label'])) {
+			$label = '<label class="' . $labelClass . '">' . $args['label'] . '</label>';
+		}
+
+		$checked = $args['checked'] ? 'checked' : '';
+		$value = $checked ? '1' : '0';
+
+		return <<<EOF
+<div class="$class">
+	$label
+	<div class="form-check">
+		<input type="hidden" name="$name" value="$value"><input id="$id" type="checkbox" class="form-check-input" onclick="this.previousSibling.value=1-this.previousSibling.value" $checked>
+		<label class="form-check-label" for="$id">$labelForCheckbox</label>
+		$tip
+	</div>
+</div>
+EOF;
+	}
+
+	public static function formSelect($args)
+	{
+		$id = 'js' . $args['name'];
+		if (isset($args['id'])) {
+			$id = $args['id'];
+		}
+
+		$class = 'custom-select';
+		if (isset($args['class'])) {
+			$class = $class . ' ' . $args['class'];
+		}
+
+		$html = '<div class="form-group row">';
+
+		if (isset($args['label'])) {
+			$html .= '<label for="' . $id . '" class="col-sm-2 col-form-label">' . $args['label'] . '</label>';
+		}
+
+		$html .= '<div class="col-sm-10">';
+		$html .= '<select id="' . $id . '" name="' . $args['name'] . '" class="' . $class . '">';
+		foreach ($args['options'] as $key => $value) {
+			$html .= '<option ' . (($key == $args['selected']) ? 'selected' : '') . ' value="' . $key . '">' . $value . '</option>';
+		}
+		$html .= '</select>';
+		if (isset($args['tip'])) {
+			$html .= '<small class="form-text text-muted">' . $args['tip'] . '</small>';
+		}
+		$html .= '</div>';
+		$html .= '</div>';
+
+		return $html;
+	}
+
+	public static function formSelectBlock($args)
+	{
+		$id = 'js' . $args['name'];
+		if (isset($args['id'])) {
+			$id = $args['id'];
+		}
+
+		$class = 'custom-select';
+		if (!empty($args['class'])) {
+			$class = $class . ' ' . $args['class'];
+		}
+
+		$html = '<div class="form-group m-0">';
+
+		if (!empty($args['label'])) {
+			$html .= '<label class="mt-4 mb-2 pb-2 border-bottom text-uppercase w-100" for="' . $id . '">' . $args['label'] . '</label>';
+		}
+
+		$html .= '<select id="' . $id . '" name="' . $args['name'] . '" class="' . $class . '">';
+		if (!empty($args['emptyOption'])) {
+			$html .= '<option value="">' . $args['emptyOption'] . '</option>';
+		}
+		foreach ($args['options'] as $key => $value) {
+			$html .= '<option ' . (($key == $args['selected']) ? 'selected' : '') . ' value="' . $key . '">' . $value . '</option>';
+		}
+		$html .= '</select>';
+		if (!empty($args['tip'])) {
+			$html .= '<small class="form-text text-muted">' . $args['tip'] . '</small>';
+		}
+		$html .= '</div>';
+
+		return $html;
+	}
+
+	public static function formInputHidden($args)
+	{
+		return '<input type="hidden" id="js' . $args['name'] . '" name="' . $args['name'] . '" value="' . $args['value'] . '">';
+	}
+
+	public static function alert($args)
+	{
+		$class = 'alert';
+		if (!empty($args['class'])) {
+			$class = $class . ' ' . $args['class'];
+		}
+
+		$text = $args['text'];
+
+		return <<<EOF
+<div class="$class" role="alert">$text</div>
+EOF;
+	}
+}

bl-kernel/admin/themes/booty/login.php

@@ -0,0 +1,57 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+  <title>Bludit</title>
+  <meta charset="<?php echo CHARSET ?>">
+  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
+  <meta name="robots" content="noindex,nofollow">
+
+  <!-- Favicon -->
+  <link rel="shortcut icon" type="image/x-icon" href="<?php echo HTML_PATH_CORE_IMG . 'favicon.png?version=' . BLUDIT_VERSION ?>">
+
+  <!-- CSS -->
+  <?php
+  echo Theme::cssBootstrap();
+  echo Theme::css(array(
+    'bludit.css',
+    'bludit.bootstrap.css'
+  ), DOMAIN_ADMIN_THEME_CSS);
+  ?>
+
+  <!-- Javascript -->
+  <?php
+  echo Theme::jquery();
+  echo Theme::jsBootstrap();
+  ?>
+
+  <!-- Plugins -->
+  <?php Theme::plugins('loginHead') ?>
+</head>
+
+<body class="login">
+
+  <!-- Plugins -->
+  <?php Theme::plugins('loginBodyBegin') ?>
+
+  <!-- Alert -->
+  <?php include('html/alert.php'); ?>
+
+  <div class="container">
+    <div class="row justify-content-md-center pt-5">
+      <div class="col-md-4 mt-5 p-5 shadow-sm bg-white rounded border">
+        <?php
+        if (Sanitize::pathFile(PATH_ADMIN_VIEWS, $layout['view'] . '.php')) {
+          include(PATH_ADMIN_VIEWS . $layout['view'] . '.php');
+        }
+        ?>
+      </div>
+    </div>
+  </div>
+
+  <!-- Plugins -->
+  <?php Theme::plugins('loginBodyEnd') ?>
+
+</body>
+
+</html>

bl-kernel/admin/views/about.php

@@ -0,0 +1,47 @@
+<?php
+
+echo Bootstrap::pageTitle(array('title'=>$L->g('About'), 'icon'=>'info-circle'));
+
+echo '
+<table class="table table-striped mt-3">
+	<tbody>
+';
+
+echo '<tr>';
+echo '<td>Bludit Edition</td>';
+if (defined('BLUDIT_PRO')) {
+	echo '<td>PRO - '.$L->g('Thanks for supporting Bludit').' <span class="fa fa-heart" style="color: #ffc107"></span></td>';
+} else {
+	echo '<td>Standard - <a target="_blank" href="https://pro.bludit.com">'.$L->g('Upgrade to Bludit PRO').'</a></td>';
+}
+echo '</tr>';
+
+echo '<tr>';
+echo '<td>Bludit Version</td>';
+echo '<td>'.BLUDIT_VERSION.'</td>';
+echo '</tr>';
+
+echo '<tr>';
+echo '<td>Bludit Codename</td>';
+echo '<td>'.BLUDIT_CODENAME.'</td>';
+echo '</tr>';
+
+echo '<tr>';
+echo '<td>Bludit Build Number</td>';
+echo '<td>'.BLUDIT_BUILD.'</td>';
+echo '</tr>';
+
+echo '<tr>';
+echo '<td>Disk usage</td>';
+echo '<td>'.Filesystem::bytesToHumanFileSize(Filesystem::getSize(PATH_ROOT)).'</td>';
+echo '</tr>';
+
+echo '<tr>';
+echo '<td><a href="'.HTML_PATH_ADMIN_ROOT.'developers'.'">Bludit Developers</a></td>';
+echo '<td></td>';
+echo '</tr>';
+
+echo '
+	</tbody>
+</table>
+';

bl-kernel/admin/views/blocks.php

@@ -0,0 +1,59 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php echo Bootstrap::formOpen(array('id'=>'jsform', 'class'=>'tab-content')); ?>
+
+<div class="align-middle">
+	<div class="float-right mt-1">
+		<button type="submit" class="btn btn-primary btn-sm" name="save"><?php $L->p('Save') ?></button>
+		<a class="btn btn-secondary btn-sm" href="<?php echo HTML_PATH_ADMIN_ROOT.'themes' ?>" role="button"><?php $L->p('Cancel') ?></a>
+	</div>
+	<?php echo Bootstrap::pageTitle(array('title'=>$L->g('Blocks'), 'icon'=>'box')); ?>
+</div>
+
+<?php
+	// Token CSRF
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'tokenCSRF',
+		'value'=>$security->getTokenCSRF()
+	));
+
+	foreach ($blocks->getAll() as $block) {
+		echo Bootstrap::formTitle(array('title'=>$block->title()));
+
+		if (Text::isNotEmpty( $block->description() )) {
+			echo Bootstrap::alert(array('class'=>'alert-primary', 'text'=>$block->description()));
+		}
+
+		echo Bootstrap::formInputText(array(
+			'name'=>'key[]',
+			'label'=>$L->g('Key'),
+			'value'=>$block->key(),
+			'class'=>'',
+			'placeholder'=>'',
+			'tip'=>'',
+			'readonly'=>true
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name'=>'title[]',
+			'label'=>$L->g('title'),
+			'value'=>$block->title(),
+			'class'=>'',
+			'placeholder'=>'',
+			'tip'=>''
+		));
+
+		echo Bootstrap::formTextarea(array(
+			'name'=>'value[]',
+			'label'=>$L->g('Value'),
+			'value'=>$block->value(),
+			'class'=>'',
+			'placeholder'=>'',
+			'tip'=>'',
+			'rows'=>5
+		));
+	}
+
+echo Bootstrap::formClose();
+
+?>

bl-kernel/admin/views/categories.php

@@ -0,0 +1,33 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+echo Bootstrap::pageTitle(array('title'=>$L->g('Categories'), 'icon'=>'tags'));
+
+echo Bootstrap::link(array(
+	'title'=>$L->g('Add a new category'),
+	'href'=>HTML_PATH_ADMIN_ROOT.'new-category',
+	'icon'=>'plus'
+));
+
+echo '
+<table class="table table-striped mt-3">
+	<thead>
+		<tr>
+			<th class="border-bottom-0" scope="col">'.$L->g('Name').'</th>
+			<th class="border-bottom-0" scope="col">'.$L->g('URL').'</th>
+		</tr>
+	</thead>
+	<tbody>
+';
+
+foreach ($categories->keys() as $key) {
+	$category = new Category($key);
+	echo '<tr>';
+	echo '<td><a href="'.HTML_PATH_ADMIN_ROOT.'edit-category/'.$key.'">'.$category->name().'</a></td>';
+	echo '<td><a href="'.$category->permalink().'">'.$url->filters('category', false).$key.'</a></td>';
+	echo '</tr>';
+}
+
+echo '
+	</tbody>
+</table>
+';

bl-kernel/admin/views/configure-plugin.php

@@ -0,0 +1,26 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php echo Bootstrap::formOpen(array('id'=>'jsform', 'class'=>'plugin-form')); ?>
+
+<div class="align-middle">
+	<?php if ($plugin->formButtons()): ?>
+	<div class="float-right mt-1">
+		<button type="submit" class="btn btn-primary btn-sm" name="save"><?php $L->p('Save') ?></button>
+		<a class="btn btn-secondary btn-sm" href="<?php echo HTML_PATH_ADMIN_ROOT.'plugins' ?>" role="button"><?php $L->p('Cancel') ?></a>
+	</div>
+	<?php endif; ?>
+	<?php echo Bootstrap::pageTitle(array('title'=>$plugin->name(), 'icon'=>'cog')); ?>
+</div>
+
+<?php
+	// Token CSRF
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'tokenCSRF',
+		'value'=>$security->getTokenCSRF()
+	));
+
+	// Print the plugin form
+	echo $plugin->form();
+?>
+
+<?php echo Bootstrap::formClose(); ?>

bl-kernel/admin/views/content.php

@@ -0,0 +1,327 @@
+<?php
+
+echo Bootstrap::pageTitle(array('title'=>$L->g('Content'), 'icon'=>'archive'));
+
+function table($type) {
+	global $url;
+	global $L;
+	global $published;
+	global $drafts;
+	global $scheduled;
+	global $static;
+	global $sticky;
+	global $autosave;
+
+	if ($type=='published') {
+		$list = $published;
+		if (empty($list)) {
+			echo '<p class="mt-4 text-muted">';
+			echo $L->g('There are no pages at this moment.');
+			echo '</p>';
+			return false;
+		}
+	} elseif ($type=='draft') {
+		$list = $drafts;
+		if (empty($list)) {
+			echo '<p class="mt-4 text-muted">';
+			echo $L->g('There are no draft pages at this moment.');
+			echo '</p>';
+			return false;
+		}
+	} elseif ($type=='scheduled') {
+		$list = $scheduled;
+		if (empty($list)) {
+			echo '<p class="mt-4 text-muted">';
+			echo $L->g('There are no scheduled pages at this moment.');
+			echo '</p>';
+			return false;
+		}
+	} elseif ($type=='static') {
+		$list = $static;
+		if (empty($list)) {
+			echo '<p class="mt-4 text-muted">';
+			echo $L->g('There are no static pages at this moment.');
+			echo '</p>';
+			return false;
+		}
+	} elseif ($type=='sticky') {
+		$list = $sticky;
+		if (empty($list)) {
+			echo '<p class="mt-4 text-muted">';
+			echo $L->g('There are no sticky pages at this moment.');
+			echo '</p>';
+			return false;
+		}
+	} elseif ($type=='autosave') {
+		$list = $autosave;
+	}
+
+	echo '
+	<table class="table mt-3">
+		<thead>
+			<tr>
+				<th class="border-0" scope="col">'.$L->g('Title').'</th>
+	';
+
+	if ($type=='published' || $type=='static' || $type=='sticky') {
+		echo '<th class="border-0 d-none d-lg-table-cell" scope="col">'.$L->g('URL').'</th>';
+	}
+
+	echo '			<th class="border-0 text-center d-sm-table-cell" scope="col">'.$L->g('Actions').'</th>
+			</tr>
+		</thead>
+		<tbody>
+	';
+
+	if ( (ORDER_BY=='position') || $type=='static' ) {
+		foreach ($list as $pageKey) {
+			try {
+				$page = new Page($pageKey);
+				if (!$page->isChild()) {
+					echo '<tr>
+					<td>
+						<div>
+							<a style="font-size: 1.1em" href="'.HTML_PATH_ADMIN_ROOT.'edit-content/'.$page->key().'">'
+							.($page->title()?$page->title():'<span class="label-empty-title">'.$L->g('Empty title').'</span> ')
+							.'</a>
+						</div>
+						<div>
+							<p style="font-size: 0.8em" class="m-0 text-uppercase text-muted">'.( ((ORDER_BY=='position') || ($type!='published'))?$L->g('Position').': '.$page->position():$page->date(MANAGE_CONTENT_DATE_FORMAT) ).'</p>
+						</div>
+					</td>';
+
+					if ($type=='published' || $type=='static' || $type=='sticky') {
+					$friendlyURL = Text::isEmpty($url->filters('page')) ? '/'.$page->key() : '/'.$url->filters('page').'/'.$page->key();
+					echo '<td class="d-none d-lg-table-cell"><a target="_blank" href="'.$page->permalink().'">'.$friendlyURL.'</a></td>';
+					}
+
+					echo '<td class="contentTools pt-3 text-center d-sm-table-cell">'.PHP_EOL;
+					echo '<a class="text-secondary d-none d-md-inline" target="_blank" href="'.$page->permalink().'"><i class="fa fa-desktop"></i>'.$L->g('View').'</a>'.PHP_EOL;
+					echo '<a class="text-secondary d-none d-md-inline ml-2" href="'.HTML_PATH_ADMIN_ROOT.'edit-content/'.$page->key().'"><i class="fa fa-edit"></i>'.$L->g('Edit').'</a>'.PHP_EOL;
+					if (count($page->children())==0) {
+						echo '<a href="#" class="ml-2 text-danger deletePageButton d-block d-sm-inline" data-toggle="modal" data-target="#jsdeletePageModal" data-key="'.$page->key().'"><i class="fa fa-trash"></i>'.$L->g('Delete').'</a>'.PHP_EOL;
+					}
+					echo '</td>';
+
+					echo '</tr>';
+
+					foreach ($page->children() as $child) {
+						//if ($child->published()) {
+						echo '<tr>
+						<td class="child">
+							<div>
+								<a style="font-size: 1.1em" href="'.HTML_PATH_ADMIN_ROOT.'edit-content/'.$child->key().'">'
+								.($child->title()?$child->title():'<span class="label-empty-title">'.$L->g('Empty title').'</span> ')
+								.'</a>
+							</div>
+							<div>
+								<p style="font-size: 0.8em" class="m-0 text-uppercase text-muted">'.( ((ORDER_BY=='position') || ($type!='published'))?$L->g('Position').': '.$child->position():$child->date(MANAGE_CONTENT_DATE_FORMAT) ).'</p>
+							</div>
+						</td>';
+
+						if ($type=='published' || $type=='static' || $type=='sticky') {
+						$friendlyURL = Text::isEmpty($url->filters('page')) ? '/'.$child->key() : '/'.$url->filters('page').'/'.$child->key();
+						echo '<td class="d-none d-lg-table-cell"><a target="_blank" href="'.$child->permalink().'">'.$friendlyURL.'</a></td>';
+						}
+
+						echo '<td class="contentTools pt-3 text-center d-sm-table-cell">'.PHP_EOL;
+						if ($type=='published' || $type=='static' || $type=='sticky') {
+						echo '<a class="text-secondary d-none d-md-inline" target="_blank" href="'.$child->permalink().'"><i class="fa fa-desktop"></i>'.$L->g('View').'</a>'.PHP_EOL;
+						}
+						echo '<a class="text-secondary d-none d-md-inline ml-2" href="'.HTML_PATH_ADMIN_ROOT.'edit-content/'.$child->key().'"><i class="fa fa-edit"></i>'.$L->g('Edit').'</a>'.PHP_EOL;
+						echo '<a class="ml-2 text-danger deletePageButton d-block d-sm-inline" href="#" data-toggle="modal" data-target="#jsdeletePageModal" data-key="'.$child->key().'"><i class="fa fa-trash"></i>'.$L->g('Delete').'</a>'.PHP_EOL;
+						echo '</td>';
+
+						echo '</tr>';
+						//}
+					}
+				}
+			} catch (Exception $e) {
+				// Continue
+			}
+		}
+	} else {
+		foreach ($list as $pageKey) {
+			try {
+				$page = new Page($pageKey);
+				echo '<tr>';
+				echo '<td class="pt-3">
+					<div>
+						<a style="font-size: 1.1em" href="'.HTML_PATH_ADMIN_ROOT.'edit-content/'.$page->key().'">'
+						.($page->title()?$page->title():'<span class="label-empty-title">'.$L->g('Empty title').'</span> ')
+						.'</a>
+					</div>
+					<div>
+						<p style="font-size: 0.8em" class="m-0 text-uppercase text-muted">'.( ($type=='scheduled')?$L->g('Scheduled').': '.$page->date(SCHEDULED_DATE_FORMAT):$page->date(MANAGE_CONTENT_DATE_FORMAT) ).'</p>
+					</div>
+				</td>';
+
+				if ($type=='published' || $type=='static' || $type=='sticky') {
+				$friendlyURL = Text::isEmpty($url->filters('page')) ? '/'.$page->key() : '/'.$url->filters('page').'/'.$page->key();
+				echo '<td class="pt-3 d-none d-lg-table-cell"><a target="_blank" href="'.$page->permalink().'">'.$friendlyURL.'</a></td>';
+				}
+
+				echo '<td class="contentTools pt-3 text-center d-sm-table-cell">'.PHP_EOL;
+				if ($type=='published' || $type=='static' || $type=='sticky') {
+				echo '<a class="text-secondary d-none d-md-inline" target="_blank" href="'.$page->permalink().'"><i class="fa fa-desktop"></i>'.$L->g('View').'</a>'.PHP_EOL;
+				}
+				echo '<a class="text-secondary d-none d-md-inline ml-2" href="'.HTML_PATH_ADMIN_ROOT.'edit-content/'.$page->key().'"><i class="fa fa-edit"></i>'.$L->g('Edit').'</a>'.PHP_EOL;
+				if (count($page->children())==0) {
+					echo '<a href="#" class="ml-2 text-danger deletePageButton d-block d-sm-inline" data-toggle="modal" data-target="#jsdeletePageModal" data-key="'.$page->key().'"><i class="fa fa-trash"></i>'.$L->g('Delete').'</a>'.PHP_EOL;
+				}
+				echo '</td>';
+
+				echo '</tr>';
+			} catch (Exception $e) {
+				// Continue
+			}
+		}
+	}
+
+	echo '
+		</tbody>
+	</table>
+	';
+}
+
+?>
+
+<!-- TABS -->
+<ul class="nav nav-tabs" role="tablist">
+	<li class="nav-item">
+		<a class="nav-link active" id="pages-tab" data-toggle="tab" href="#pages" role="tab"><?php $L->p('Pages') ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" id="static-tab" data-toggle="tab" href="#static" role="tab"><?php $L->p('Static') ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" id="sticky-tab" data-toggle="tab" href="#sticky" role="tab"><?php $L->p('Sticky') ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" id="scheduled-tab" data-toggle="tab" href="#scheduled" role="tab"><?php $L->p('Scheduled') ?> <?php if (count($scheduled)>0) { echo '<span class="badge badge-danger">'.count($scheduled).'</span>'; } ?></a>
+	</li>
+	<li class="nav-item">
+		<a class="nav-link" id="draft-tab" data-toggle="tab" href="#draft" role="tab"><?php $L->p('Draft') ?></a>
+	</li>
+	<?php if (!empty($autosave)): ?>
+	<li class="nav-item">
+		<a class="nav-link" id="autosave-tab" data-toggle="tab" href="#autosave" role="tab"><?php $L->p('Autosave') ?></a>
+	</li>
+	<?php endif; ?>
+</ul>
+<div class="tab-content">
+	<!-- TABS PAGES -->
+	<div class="tab-pane show active" id="pages" role="tabpanel">
+
+		<?php table('published'); ?>
+
+		<?php if (Paginator::numberOfPages() > 1): ?>
+		<!-- Paginator -->
+		<nav class="paginator">
+			<ul class="pagination flex-wrap justify-content-center">
+
+			<!-- First button -->
+			<li class="page-item <?php if (!Paginator::showPrev()) echo 'disabled' ?>">
+				<a class="page-link" href="<?php echo Paginator::firstPageUrl() ?>"><span class="align-middle fa fa-media-skip-backward"></span> <?php echo $L->get('First'); ?></a>
+			</li>
+
+			<!-- Previous button -->
+			<li class="page-item <?php if (!Paginator::showPrev()) echo 'disabled' ?>">
+				<a class="page-link" href="<?php echo Paginator::previousPageUrl() ?>"><?php echo $L->get('Previous'); ?></a>
+			</li>
+
+			<!-- Next button -->
+			<li class="page-item <?php if (!Paginator::showNext()) echo 'disabled' ?>">
+				<a class="page-link" href="<?php echo Paginator::nextPageUrl() ?>"><?php echo $L->get('Next'); ?></a>
+			</li>
+
+			<!-- Last button -->
+			<li class="page-item <?php if (!Paginator::showNext()) echo 'disabled' ?>">
+				<a class="page-link" href="<?php echo Paginator::lastPageUrl() ?>"><?php echo $L->get('Last'); ?> <span class="align-middle fa fa-media-skip-forward"></span></a>
+			</li>
+
+			</ul>
+		</nav>
+		<?php endif; ?>
+	</div>
+
+	<!-- TABS STATIC -->
+	<div class="tab-pane" id="static" role="tabpanel">
+	<?php table('static'); ?>
+	</div>
+
+	<!-- TABS STICKY -->
+	<div class="tab-pane" id="sticky" role="tabpanel">
+	<?php table('sticky'); ?>
+	</div>
+
+	<!-- TABS SCHEDULED -->
+	<div class="tab-pane" id="scheduled" role="tabpanel">
+	<?php table('scheduled'); ?>
+	</div>
+
+	<!-- TABS DRAFT -->
+	<div class="tab-pane" id="draft" role="tabpanel">
+	<?php table('draft'); ?>
+	</div>
+
+	<!-- TABS AUTOSAVE -->
+	<?php if (!empty($autosave)): ?>
+	<div class="tab-pane" id="autosave" role="tabpanel">
+	<?php table('autosave'); ?>
+	</div>
+	<?php endif; ?>
+</div>
+
+<!-- Modal for delete page -->
+<?php
+	echo Bootstrap::modal(array(
+		'buttonPrimary'=>$L->g('Delete'),
+		'buttonPrimaryClass'=>'btn-danger deletePageModalAcceptButton',
+		'buttonSecondary'=>$L->g('Cancel'),
+		'buttonSecondaryClass'=>'btn-link',
+		'modalTitle'=>$L->g('Delete content'),
+		'modalText'=>$L->g('Are you sure you want to delete this page'),
+		'modalId'=>'jsdeletePageModal'
+	));
+?>
+<script>
+$(document).ready(function() {
+	var key = false;
+
+	// Button for delete a page in the table
+	$(".deletePageButton").on("click", function() {
+		key = $(this).data('key');
+	});
+
+	// Event from button accept from the modal
+	$(".deletePageModalAcceptButton").on("click", function() {
+
+		var form = jQuery('<form>', {
+			'action': HTML_PATH_ADMIN_ROOT+'edit-content/'+key,
+			'method': 'post',
+			'target': '_top'
+		}).append(jQuery('<input>', {
+			'type': 'hidden',
+			'name': 'tokenCSRF',
+			'value': tokenCSRF
+		}).append(jQuery('<input>', {
+			'type': 'hidden',
+			'name': 'key',
+			'value': key
+		}).append(jQuery('<input>', {
+			'type': 'hidden',
+			'name': 'type',
+			'value': 'delete'
+		}))));
+
+		form.hide().appendTo("body").submit();
+	});
+});
+</script>
+
+<script>
+	// Open the tab defined in the URL
+	const anchor = window.location.hash;
+	$(`a[href="${anchor}"]`).tab('show');
+</script>

bl-kernel/admin/views/dashboard.php

@@ -0,0 +1,140 @@
+<div id="dashboard" class="container">
+    <div class="row">
+        <div class="col-md-7">
+
+            <!-- Good message -->
+            <div>
+                <h2 id="hello-message" class="pt-0">
+                    <?php
+                    $username = $login->username();
+                    $user = new User($username);
+                    $name = '';
+                    if ($user->nickname()) {
+                        $name = $user->nickname();
+                    } elseif ($user->firstName()) {
+                        $name = $user->firstName();
+                    }
+                    ?>
+                    <span class="fa fa-hand-spock-o"></span><span><?php echo $L->g('welcome') ?></span>
+                </h2>
+                <script>
+                    $(document).ready(function() {
+                        $("#hello-message").fadeOut(2400, function() {
+                            var date = new Date()
+                            var hours = date.getHours()
+                            if (hours >= 6 && hours < 12) {
+                                $(this).html('<span class="fa fa-sun-o"></span><?php echo $L->g('good-morning') . ', ' . $name ?>');
+                            } else if (hours >= 12 && hours < 18) {
+                                $(this).html('<span class="fa fa-sun-o"></span><?php echo $L->g('good-afternoon') . ', ' . $name ?>');
+                            } else if (hours >= 18 && hours < 22) {
+                                $(this).html('<span class="fa fa-moon-o"></span><?php echo $L->g('good-evening') . ', ' . $name ?>');
+                            } else {
+                                $(this).html('<span class="fa fa-moon-o"></span><span><?php echo $L->g('good-night') . ', ' . $name ?></span>');
+                            }
+                        }).fadeIn(1000);
+                    });
+                </script>
+            </div>
+
+            <!-- Quick Links -->
+            <div class="container pb-5" id="jsclippyContainer">
+
+                <div class="row">
+                    <div class="col p-0">
+                        <div class="form-group">
+                            <select id="jsclippy" class="clippy" name="state"></select>
+                        </div>
+                    </div>
+                </div>
+
+                <script>
+                    $(document).ready(function() {
+
+                        var clippy = $("#jsclippy").select2({
+                            placeholder: "<?php $L->p('Start typing to see a list of suggestions') ?>",
+                            allowClear: true,
+                            width: "100%",
+                            theme: "bootstrap4",
+                            minimumInputLength: 2,
+                            dropdownParent: "#jsclippyContainer",
+                            language: {
+                                inputTooShort: function() {
+                                    return '';
+                                }
+                            },
+                            ajax: {
+                                url: HTML_PATH_ADMIN_ROOT + "ajax/clippy",
+                                data: function(params) {
+                                    var query = {
+                                        query: params.term
+                                    }
+                                    return query;
+                                },
+                                processResults: function(data) {
+                                    return data;
+                                }
+                            },
+                            templateResult: function(data) {
+                                // console.log(data);
+                                var html = '';
+                                if (data.type == 'menu') {
+                                    html += '<a href="' + data.url + '"><div class="search-suggestion">';
+                                    html += '<span class="fa fa-' + data.icon + '"></span>' + data.text + '</div></a>';
+                                } else {
+                                    if (typeof data.id === 'undefined') {
+                                        return '';
+                                    }
+                                    html += '<div class="search-suggestion">';
+                                    html += '<div class="search-suggestion-item">' + data.text + ' <span class="badge badge-pill badge-light">' + data.type + '</span></div>';
+                                    html += '<div class="search-suggestion-options">';
+                                    html += '<a target="_blank" href="' + DOMAIN_PAGES + data.id + '"><?php $L->p('view') ?></a>';
+                                    html += '<a class="ml-2" href="' + DOMAIN_ADMIN + 'edit-content/' + data.id + '"><?php $L->p('edit') ?></a>';
+                                    html += '</div></div>';
+                                }
+
+                                return html;
+                            },
+                            escapeMarkup: function(markup) {
+                                return markup;
+                            }
+                        }).on("select2:closing", function(e) {
+                            e.preventDefault();
+                        }).on("select2:closed", function(e) {
+                            clippy.select2("open");
+                        });
+                        clippy.select2("open");
+
+                    });
+                </script>
+            </div>
+
+            <?php Theme::plugins('dashboard') ?>
+        </div>
+        <div class="col-md-5">
+
+            <!-- Notifications -->
+            <ul class="list-group list-group-striped b-0">
+                <li class="list-group-item pt-0">
+                    <h4 class="m-0"><?php $L->p('Notifications') ?></h4>
+                </li>
+                <?php
+                $logs = array_slice($syslog->db, 0, NOTIFICATIONS_AMOUNT);
+                foreach ($logs as $log) {
+                    $phrase = $L->g($log['dictionaryKey']);
+                    echo '<li class="list-group-item">';
+                    echo $phrase;
+                    if (!empty($log['notes'])) {
+                        echo ' « <b>' . $log['notes'] . '</b> »';
+                    }
+                    echo '<br><span class="notification-date"><small>';
+                    echo Date::format($log['date'], DB_DATE_FORMAT, NOTIFICATIONS_DATE_FORMAT);
+                    echo ' [ ' . $log['username'] . ' ]';
+                    echo '</small></span>';
+                    echo '</li>';
+                }
+                ?>
+            </ul>
+
+        </div>
+    </div>
+</div>

bl-kernel/admin/views/developers.php

@@ -0,0 +1,38 @@
+<?php
+
+echo Bootstrap::pageTitle(array('title'=>$L->g('Developers'), 'icon'=>'gears'));
+
+echo '<h2 class="mb-4 mt-4"><b>PHP version: '.phpversion().'</b></h2>';
+
+// PHP Ini
+$uploadOptions = array(
+	'upload_max_filesize'=>ini_get('upload_max_filesize'),
+	'post_max_size'=>ini_get('post_max_size'),
+	'upload_tmp_dir'=>ini_get('upload_tmp_dir')
+);
+printTable('File Uploads', $uploadOptions);
+
+// Loaded extensions
+printTable('Server information ( $_SERVER )', $_SERVER);
+
+// PHP Ini
+printTable('PHP Configuration options ( ini_get_all() )', ini_get_all());
+
+// Loaded extensions
+printTable('Loaded extensions',get_loaded_extensions());
+
+// Locales installed
+exec('locale -a', $locales);
+printTable('Locales installed', $locales);
+
+echo '<hr>';
+echo '<h2>BLUDIT</h2>';
+echo '<hr>';
+
+// Constanst defined by Bludit
+$constants = get_defined_constants(true);
+printTable('Bludit Constants', $constants['user']);
+
+// Site object
+printTable('$site object database',$site->db);
+

bl-kernel/admin/views/edit-category.php

@@ -0,0 +1,92 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php echo Bootstrap::formOpen(array('id'=>'jsform')); ?>
+
+<div class="align-middle">
+	<div class="float-right mt-1">
+		<button type="submit" class="btn btn-primary btn-sm" name="save"><?php $L->p('Save') ?></button>
+		<button type="button" class="btn btn-danger btn-sm" data-toggle="modal" data-target="#jsdeleteModal"><?php $L->p('Delete') ?></button>
+		<a class="btn btn-secondary btn-sm" href="<?php echo HTML_PATH_ADMIN_ROOT.'dashboard' ?>" role="button"><?php $L->p('Cancel') ?></a>
+	</div>
+	<?php echo Bootstrap::pageTitle(array('title'=>$L->g('Edit Category'), 'icon'=>'cog')); ?>
+</div>
+
+<?php
+	// Token CSRF
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'tokenCSRF',
+		'value'=>$security->getTokenCSRF()
+	));
+
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'action',
+		'value'=>'edit'
+	));
+
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'oldKey',
+		'value'=>$categoryMap['key']
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name'=>'name',
+		'label'=>$L->g('Name'),
+		'value'=>$categoryMap['name'],
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>''
+	));
+
+	echo Bootstrap::formTextarea(array(
+		'name'=>'description',
+		'label'=>$L->g('Description'),
+		'value'=>isset($categoryMap['description'])?$categoryMap['description']:'',
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>'',
+		'rows'=>3
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name'=>'template',
+		'label'=>$L->g('Template'),
+		'value'=>isset($categoryMap['template'])?$categoryMap['template']:'',
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name'=>'newKey',
+		'label'=>$L->g('Friendly URL'),
+		'value'=>$categoryMap['key'],
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>DOMAIN_CATEGORIES.$categoryMap['key']
+	));
+
+echo Bootstrap::formClose();
+
+?>
+
+<!-- Modal for delete category -->
+<?php
+	echo Bootstrap::modal(array(
+		'buttonPrimary'=>$L->g('Delete'),
+		'buttonPrimaryClass'=>'btn-danger jsbuttonDeleteAccept',
+		'buttonSecondary'=>$L->g('Cancel'),
+		'buttonSecondaryClass'=>'btn-link',
+		'modalTitle'=>$L->g('Delete category'),
+		'modalText'=>$L->g('Are you sure you want to delete this category?'),
+		'modalId'=>'jsdeleteModal'
+	));
+?>
+<script>
+$(document).ready(function() {
+	// Delete content
+	$(".jsbuttonDeleteAccept").on("click", function() {
+		$("#jsaction").val("delete");
+		$("#jsform").submit();
+	});
+});
+</script>

bl-kernel/admin/views/edit-content.php

@@ -0,0 +1,563 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php
+
+// FORM START
+echo Bootstrap::formOpen(array(
+	'id' => 'jsform',
+	'class' => 'd-flex flex-column h-100'
+));
+
+// Token CSRF
+echo Bootstrap::formInputHidden(array(
+	'name' => 'tokenCSRF',
+	'value' => $security->getTokenCSRF()
+));
+
+// UUID
+// The UUID is generated in the controller
+echo Bootstrap::formInputHidden(array(
+	'name' => 'uuid',
+	'value' => $page->uuid()
+));
+
+// Type = published, draft, sticky, static
+echo Bootstrap::formInputHidden(array(
+	'name' => 'type',
+	'value' => $page->type()
+));
+
+// Cover image
+echo Bootstrap::formInputHidden(array(
+	'name' => 'coverImage',
+	'value' => $page->coverImage(false)
+));
+
+// Content
+echo Bootstrap::formInputHidden(array(
+	'name' => 'content',
+	'value' => ''
+));
+
+// Current page key
+echo Bootstrap::formInputHidden(array(
+	'name' => 'key',
+	'value' => $page->key()
+));
+?>
+
+<!-- TOOLBAR -->
+<div id="jseditorToolbar" class="mb-1">
+	<div id="jseditorToolbarRight" class="btn-group btn-group-sm float-right" role="group" aria-label="Toolbar right">
+		<button type="button" class="btn btn-light" id="jsmediaManagerOpenModal" data-toggle="modal" data-target="#jsmediaManagerModal"><span class="fa fa-image"></span> <?php $L->p('Images') ?></button>
+		<button type="button" class="btn btn-light" id="jsoptionsSidebar" style="z-index:30"><span class="fa fa-cog"></span> <?php $L->p('Options') ?></button>
+	</div>
+
+	<div id="jseditorToolbarLeft">
+		<button type="button" class="btn btn-sm btn-primary" id="jsbuttonSave"><?php echo $L->g('Save') ?></button>
+		<button id="jsbuttonPreview" type="button" class="btn btn-sm btn-secondary"><?php $L->p('Preview') ?></button>
+		<span id="jsswitchButton" data-switch="<?php echo ($page->draft() ? 'draft' : 'publish') ?>" class="ml-2 text-secondary switch-button"><i class="fa fa-square switch-icon-<?php echo ($page->draft() ? 'draft' : 'publish') ?>"></i> <?php echo ($page->draft() ? $L->g('Draft') : $L->g('Publish')) ?></span>
+	</div>
+
+	<?php if ($page->scheduled()) : ?>
+		<div class="alert alert-warning p-1 mt-1 mb-0"><?php $L->p('scheduled') ?>: <?php echo $page->date(SCHEDULED_DATE_FORMAT) ?></div>
+	<?php endif; ?>
+</div>
+<script>
+	$(document).ready(function() {
+		$("#jsoptionsSidebar").on("click", function() {
+			$("#jseditorSidebar").toggle();
+			$("#jsshadow").toggle();
+		});
+
+		$("#jsshadow").on("click", function() {
+			$("#jseditorSidebar").toggle();
+			$("#jsshadow").toggle();
+		});
+	});
+</script>
+
+<!-- SIDEBAR OPTIONS -->
+<div id="jseditorSidebar">
+	<nav>
+		<div class="nav nav-tabs" id="nav-tab" role="tablist">
+			<a class="nav-link active show" id="nav-general-tab" data-toggle="tab" href="#nav-general" role="tab" aria-controls="general"><?php $L->p('General') ?></a>
+			<a class="nav-link" id="nav-advanced-tab" data-toggle="tab" href="#nav-advanced" role="tab" aria-controls="advanced"><?php $L->p('Advanced') ?></a>
+			<?php if (!empty($site->customFields())) : ?>
+				<a class="nav-link" id="nav-custom-tab" data-toggle="tab" href="#nav-custom" role="tab" aria-controls="custom"><?php $L->p('Custom') ?></a>
+			<?php endif ?>
+			<a class="nav-link" id="nav-seo-tab" data-toggle="tab" href="#nav-seo" role="tab" aria-controls="seo"><?php $L->p('SEO') ?></a>
+		</div>
+	</nav>
+
+	<div class="tab-content pr-3 pl-3 pb-3">
+		<div id="nav-general" class="tab-pane fade show active" role="tabpanel" aria-labelledby="general-tab">
+			<?php
+			// Category
+			echo Bootstrap::formSelectBlock(array(
+				'name' => 'category',
+				'label' => $L->g('Category'),
+				'selected' => $page->categoryKey(),
+				'class' => '',
+				'emptyOption' => '- ' . $L->g('Uncategorized') . ' -',
+				'options' => $categories->getKeyNameArray()
+			));
+
+			// Description
+			echo Bootstrap::formTextareaBlock(array(
+				'name' => 'description',
+				'label' => $L->g('Description'),
+				'selected' => '',
+				'class' => '',
+				'value' => $page->description(),
+				'rows' => 5,
+				'placeholder' => $L->get('this-field-can-help-describe-the-content')
+			));
+			?>
+
+			<!-- Cover Image -->
+			<?php
+			$coverImage = $page->coverImage(false);
+			$externalCoverImage = '';
+			if (filter_var($coverImage, FILTER_VALIDATE_URL)) {
+				$coverImage = '';
+				$externalCoverImage = $page->coverImage(false);
+			}
+			?>
+			<label class="mt-4 mb-2 pb-2 border-bottom text-uppercase w-100"><?php $L->p('Cover Image') ?></label>
+			<div>
+				<img id="jscoverImagePreview" class="mx-auto d-block w-100" alt="Cover image preview" src="<?php echo (empty($coverImage) ? HTML_PATH_CORE_IMG . 'default.svg' : $page->coverImage()) ?>" />
+			</div>
+			<div class="mt-2 text-center">
+				<button type="button" id="jsbuttonSelectCoverImage" class="btn btn-primary btn-sm"><?php echo $L->g('Select cover image') ?></button>
+				<button type="button" id="jsbuttonRemoveCoverImage" class="btn btn-secondary btn-sm"><?php echo $L->g('Remove cover image') ?></button>
+			</div>
+			<script>
+				$(document).ready(function() {
+					$("#jscoverImagePreview").on("click", function() {
+						openMediaManager();
+					});
+
+					$("#jsbuttonSelectCoverImage").on("click", function() {
+						openMediaManager();
+					});
+
+					$("#jsbuttonRemoveCoverImage").on("click", function() {
+						$("#jscoverImage").val('');
+						$("#jscoverImagePreview").attr('src', HTML_PATH_CORE_IMG + 'default.svg');
+					});
+				});
+			</script>
+		</div>
+		<div id="nav-advanced" class="tab-pane fade" role="tabpanel" aria-labelledby="advanced-tab">
+			<?php
+			// Date
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'date',
+				'label' => $L->g('Date'),
+				'placeholder' => '',
+				'value' => $page->dateRaw(),
+				'tip' => $L->g('date-format-format')
+			));
+
+			// Type
+			echo Bootstrap::formSelectBlock(array(
+				'name' => 'typeSelector',
+				'label' => $L->g('Type'),
+				'selected' => $page->type(),
+				'options' => array(
+					'published' => '- ' . $L->g('Default') . ' -',
+					'sticky' => $L->g('Sticky'),
+					'static' => $L->g('Static')
+				),
+				'tip' => ''
+			));
+
+			// Position
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'position',
+				'label' => $L->g('Position'),
+				'tip' => $L->g('Field used when ordering content by position'),
+				'value' => $page->position()
+			));
+
+			// Tags
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'tags',
+				'label' => $L->g('Tags'),
+				'placeholder' => '',
+				'tip' => $L->g('Write the tags separated by comma'),
+				'value' => $page->tags()
+			));
+
+			// Parent
+			try {
+				$options = array();
+				$parentKey = $page->parent();
+				if (!empty($parentKey)) {
+					$parent = new Page($parentKey);
+					$options = array($parentKey => $parent->title());
+				}
+			} catch (Exception $e) {
+				// continue
+			}
+			echo Bootstrap::formSelectBlock(array(
+				'name' => 'parent',
+				'label' => $L->g('Parent'),
+				'options' => $options,
+				'selected' => false,
+				'class' => '',
+				'tip' => $L->g('Start typing a page title to see a list of suggestions.'),
+			));
+
+			?>
+
+			<script>
+				$(document).ready(function() {
+					var parent = $("#jsparent").select2({
+						placeholder: "",
+						allowClear: true,
+						theme: "bootstrap4",
+						minimumInputLength: 2,
+						ajax: {
+							url: HTML_PATH_ADMIN_ROOT + "ajax/get-published",
+							data: function(params) {
+								var query = {
+									checkIsParent: true,
+									query: params.term
+								}
+								return query;
+							},
+							processResults: function(data) {
+								return data;
+							}
+						},
+						escapeMarkup: function(markup) {
+							return markup;
+						},
+						templateResult: function(data) {
+							var html = data.text
+							if (data.type == "static") {
+								html += '<span class="badge badge-pill badge-light">' + data.type + '</span>';
+							}
+							return html;
+						}
+					});
+				});
+			</script>
+
+			<?php
+
+			// Template
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'template',
+				'label' => $L->g('Template'),
+				'placeholder' => '',
+				'value' => $page->template(),
+				'tip' => $L->g('Write a template name to filter the page in the theme and change the style of the page.')
+			));
+
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'externalCoverImage',
+				'label' => $L->g('External cover image'),
+				'placeholder' => "https://",
+				'value' => $externalCoverImage,
+				'tip' => $L->g('Set a cover image from external URL, such as a CDN or some server dedicated for images.')
+			));
+
+			// Username
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => '',
+				'label' => $L->g('Author'),
+				'placeholder' => '',
+				'value' => $page->username(),
+				'tip' => '',
+				'disabled' => true
+			));
+			?>
+			<script>
+				$(document).ready(function() {
+					// Changes in External cover image input
+					$("#jsexternalCoverImage").change(function() {
+						$("#jscoverImage").val($(this).val());
+					});
+
+					// Datepicker
+					$("#jsdate").datetimepicker({
+						format: DB_DATE_FORMAT
+					});
+				});
+			</script>
+		</div>
+
+		<?php if (!empty($site->customFields())) : ?>
+			<div id="nav-custom" class="tab-pane fade" role="tabpanel" aria-labelledby="custom-tab">
+				<?php
+				$customFields = $site->customFields();
+				foreach ($customFields as $field => $options) {
+					if (!isset($options['position'])) {
+						if ($options['type'] == "string") {
+							echo Bootstrap::formInputTextBlock(array(
+								'name' => 'custom[' . $field . ']',
+								'value' => (isset($options['default']) ? $options['default'] : ''),
+								'tip' => (isset($options['tip']) ? $options['tip'] : ''),
+								'label' => (isset($options['label']) ? $options['label'] : ''),
+								'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+								'value' => $page->custom($field)
+							));
+						} elseif ($options['type'] == "bool") {
+							echo Bootstrap::formCheckbox(array(
+								'name' => 'custom[' . $field . ']',
+								'label' => (isset($options['label']) ? $options['label'] : ''),
+								'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+								'checked' => $page->custom($field),
+								'labelForCheckbox' => (isset($options['tip']) ? $options['tip'] : '')
+							));
+						}
+					}
+				}
+				?>
+			</div>
+		<?php endif ?>
+
+		<div id="nav-seo" class="tab-pane fade" role="tabpanel" aria-labelledby="seo-tab">
+			<?php
+			// Friendly URL
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'slug',
+				'tip' => $L->g('URL associated with the content'),
+				'label' => $L->g('Friendly URL'),
+				'placeholder' => $L->g('Leave empty for autocomplete by Bludit.'),
+				'value' => $page->slug()
+			));
+
+			// Robots
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'noindex',
+				'label' => 'Robots',
+				'labelForCheckbox' => $L->g('apply-code-noindex-code-to-this-page'),
+				'placeholder' => '',
+				'checked' => $page->noindex(),
+				'tip' => $L->g('This tells search engines not to show this page in their search results.')
+			));
+
+			// Robots
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'nofollow',
+				'label' => '',
+				'labelForCheckbox' => $L->g('apply-code-nofollow-code-to-this-page'),
+				'placeholder' => '',
+				'checked' => $page->nofollow(),
+				'tip' => $L->g('This tells search engines not to follow links on this page.')
+			));
+
+			// Robots
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'noarchive',
+				'label' => '',
+				'labelForCheckbox' => $L->g('apply-code-noarchive-code-to-this-page'),
+				'placeholder' => '',
+				'checked' => $page->noarchive(),
+				'tip' => $L->g('This tells search engines not to save a cached copy of this page.')
+			));
+			?>
+		</div>
+	</div>
+</div>
+
+<!-- Custom fields: TOP -->
+<?php
+$customFields = $site->customFields();
+foreach ($customFields as $field => $options) {
+	if (isset($options['position']) && ($options['position'] == 'top')) {
+		if ($options['type'] == "string") {
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'custom[' . $field . ']',
+				'label' => (isset($options['label']) ? $options['label'] : ''),
+				'value' => $page->custom($field),
+				'tip' => (isset($options['tip']) ? $options['tip'] : ''),
+				'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+				'class' => 'mb-2',
+				'labelClass' => 'mb-2 pb-2 border-bottom text-uppercase w-100'
+
+			));
+		} elseif ($options['type'] == "bool") {
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'custom[' . $field . ']',
+				'label' => (isset($options['label']) ? $options['label'] : ''),
+				'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+				'checked' => $page->custom($field),
+				'labelForCheckbox' => (isset($options['tip']) ? $options['tip'] : ''),
+				'class' => 'mb-2',
+				'labelClass' => 'mb-2 pb-2 border-bottom text-uppercase w-100'
+			));
+		}
+	}
+}
+?>
+
+<!-- Title -->
+<div class="form-group mb-1">
+	<input id="jstitle" name="title" type="text" dir="auto" class="form-control form-control-lg rounded-0" value="<?php echo $page->title() ?>" placeholder="<?php $L->p('Enter title') ?>">
+</div>
+
+<!-- Editor -->
+<textarea id="jseditor" class="editable h-100" style=""><?php echo $page->contentRaw(true) ?></textarea>
+
+<!-- Custom fields: BOTTOM -->
+<?php
+$customFields = $site->customFields();
+foreach ($customFields as $field => $options) {
+	if (isset($options['position']) && ($options['position'] == 'bottom')) {
+		if ($options['type'] == "string") {
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'custom[' . $field . ']',
+				'label' => (isset($options['label']) ? $options['label'] : ''),
+				'value' => $page->custom($field),
+				'tip' => (isset($options['tip']) ? $options['tip'] : ''),
+				'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+				'class' => 'mt-2',
+				'labelClass' => 'mb-2 pb-2 border-bottom text-uppercase w-100'
+
+			));
+		} elseif ($options['type'] == "bool") {
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'custom[' . $field . ']',
+				'label' => (isset($options['label']) ? $options['label'] : ''),
+				'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+				'checked' => $page->custom($field),
+				'labelForCheckbox' => (isset($options['tip']) ? $options['tip'] : ''),
+				'class' => 'mt-2',
+				'labelClass' => 'mb-2 pb-2 border-bottom text-uppercase w-100'
+			));
+		}
+	}
+}
+?>
+
+</form>
+
+<!-- Modal for Delete page -->
+<div id="jsdeletePageModal" class="modal" tabindex="-1" role="dialog">
+	<div class="modal-dialog">
+		<div class="modal-content">
+			<div class="modal-body">
+				<h3><?php $L->p('Delete content') ?></h3>
+				<p><?php $L->p('Are you sure you want to delete this page') ?></p>
+			</div>
+			<div class="modal-footer">
+				<button type="button" class="btn btn-link" data-dismiss="modal"><?php $L->p('Cancel') ?></button>
+				<button type="button" class="btn btn-danger" data-dismiss="modal" id="jsbuttonDeleteAccept"><?php $L->p('Delete') ?></button>
+			</div>
+		</div>
+	</div>
+	<script>
+		$(document).ready(function() {
+			$("#jsbuttonDeleteAccept").on("click", function() {
+				$("#jstype").val("delete");
+				$("#jscontent").val("");
+				$("#jsform").submit();
+			});
+		});
+	</script>
+</div>
+
+<!-- Modal for Media Manager -->
+<?php include(PATH_ADMIN_THEMES . 'booty/html/media.php'); ?>
+
+<script>
+	$(document).ready(function() {
+
+		// Define function if they doesn't exist
+		// This helps if the user doesn't activate any plugin as editor
+		if (typeof editorGetContent != "function") {
+			window.editorGetContent = function() {
+				return $("#jseditor").val();
+			};
+		}
+		if (typeof editorInsertMedia != "function") {
+			window.editorInsertMedia = function(filename) {
+				$("#jseditor").val($('#jseditor').val() + '<img src="' + filename + '" alt="">');
+			};
+		}
+		if (typeof editorInsertLinkedMedia != "function") {
+			window.editorInsertLinkedMedia = function(filename, link) {
+				$("#jseditor").val($('#jseditor').val() + '<a href="' + link + '"><img src="' + filename + '" alt=""></a>');
+			};
+		}
+
+		// Button switch
+		$("#jsswitchButton").on("click", function() {
+			if ($(this).data("switch") == "publish") {
+				$(this).html('<i class="fa fa-square switch-icon-draft"></i> <?php $L->p('Draft') ?>');
+				$(this).data("switch", "draft");
+			} else {
+				$(this).html('<i class="fa fa-square switch-icon-publish"></i> <?php $L->p('Publish') ?>');
+				$(this).data("switch", "publish");
+			}
+		});
+
+		// Button preview
+		$("#jsbuttonPreview").on("click", function() {
+			var uuid = $("#jsuuid").val();
+			var title = $("#jstitle").val();
+			var content = editorGetContent();
+			var ajax = new bluditAjax();
+			bluditAjax.saveAsDraft(uuid, title, content).then(function(data) {
+				var preview = window.open("<?php echo DOMAIN_PAGES . 'autosave-' . $page->uuid() . '?preview=' . md5('autosave-' . $page->uuid()) ?>", "bludit-preview");
+				preview.focus();
+			});
+		});
+
+		// Button Save
+		$("#jsbuttonSave").on("click", function() {
+			// If the switch is setted to "published", get the value from the selector
+			if ($("#jsswitchButton").data("switch") == "publish") {
+				var value = $("#jstypeSelector option:selected").val();
+				$("#jstype").val(value);
+			} else {
+				$("#jstype").val("draft");
+			}
+
+			// Get the content
+			$("#jscontent").val(editorGetContent());
+
+			// Submit the form
+			$("#jsform").submit();
+		});
+
+		// Button Save as draft
+		$("#jsbuttonDraft").on("click", function() {
+			// Set the type as draft
+			$("#jstype").val("draft");
+
+			// Get the content
+			$("#jscontent").val(editorGetContent());
+
+			// Submit the form
+			$("#jsform").submit();
+		});
+
+		// Autosave
+		var currentContent = editorGetContent();
+		setInterval(function() {
+			var uuid = $("#jsuuid").val();
+			var title = $("#jstitle").val() + "[<?php $L->p('Autosave') ?>]";
+			var content = editorGetContent();
+			// Autosave when content has at least 100 characters
+			if (content.length < 100) {
+				return false;
+			}
+			// Autosave only when the user change the content
+			if (currentContent != content) {
+				currentContent = content;
+				bluditAjax.saveAsDraft(uuid, title, content).then(function(data) {
+					if (data.status == 0) {
+						showAlert("<?php $L->p('Autosave') ?>");
+					}
+				});
+			}
+		}, 1000 * 60 * AUTOSAVE_INTERVAL);
+
+	});
+</script>

bl-kernel/admin/views/edit-user.php

@@ -0,0 +1,316 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php echo Bootstrap::formOpen(array('id' => 'jsform', 'class' => 'tab-content')); ?>
+
+<div class="align-middle">
+	<div class="float-right mt-1">
+		<button type="submit" class="btn btn-primary btn-sm" name="save"><?php $L->p('Save') ?></button>
+		<a class="btn btn-secondary btn-sm" href="<?php echo HTML_PATH_ADMIN_ROOT . 'users' ?>" role="button"><?php $L->p('Cancel') ?></a>
+	</div>
+	<?php echo Bootstrap::pageTitle(array('title' => $L->g('Edit user'), 'icon' => 'user')); ?>
+</div>
+
+<!-- TABS -->
+<nav class="mb-3">
+	<div class="nav nav-tabs" id="nav-tab" role="tablist">
+		<a class="nav-item nav-link active" id="nav-profile-tab" data-toggle="tab" href="#profile" role="tab" aria-controls="nav-profile" aria-selected="false"><?php $L->p('Profile') ?></a>
+		<a class="nav-item nav-link" id="nav-picture-tab" data-toggle="tab" href="#picture" role="tab" aria-controls="nav-picture" aria-selected="false"><?php $L->p('Profile picture') ?></a>
+		<a class="nav-item nav-link" id="nav-security-tab" data-toggle="tab" href="#security" role="tab" aria-controls="nav-security" aria-selected="false"><?php $L->p('Security') ?></a>
+		<a class="nav-item nav-link" id="nav-social-tab" data-toggle="tab" href="#social" role="tab" aria-controls="nav-social" aria-selected="false"><?php $L->p('Social Networks') ?></a>
+	</div>
+</nav>
+
+<?php
+// Token CSRF
+echo Bootstrap::formInputHidden(array(
+	'name' => 'tokenCSRF',
+	'value' => $security->getTokenCSRF()
+));
+
+// Username
+echo Bootstrap::formInputHidden(array(
+	'name' => 'username',
+	'value' => $user->username()
+));
+?>
+
+<div class="tab-content" id="nav-tabContent">
+	<!-- Profile tab -->
+	<div class="tab-pane fade show active" id="profile" role="tabpanel" aria-labelledby="nav-profile-tab">
+		<?php
+		// Display username but disable the field
+		echo Bootstrap::formInputText(array(
+			'name' => 'usernameDisabled',
+			'label' => $L->g('Username'),
+			'value' => $user->username(),
+			'class' => '',
+			'placeholder' => '',
+			'disabled' => true,
+			'tip' => ''
+		));
+
+		if ($login->role() === 'admin') {
+			echo Bootstrap::formSelect(array(
+				'name' => 'role',
+				'label' => $L->g('Role'),
+				'options' => array('author' => $L->g('Author'), 'editor' => $L->g('Editor'), 'admin' => $L->g('Administrator')),
+				'selected' => $user->role(),
+				'class' => '',
+				'tip' => $L->g('author-can-write-and-edit-their-own-content')
+			));
+		}
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'email',
+			'label' => $L->g('Email'),
+			'value' => $user->email(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'nickname',
+			'label' => $L->g('Nickname'),
+			'value' => $user->nickname(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => $L->g('The nickname is almost used in the themes to display the author of the content')
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'firstName',
+			'label' => $L->g('First Name'),
+			'value' => $user->firstName(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'lastName',
+			'label' => $L->g('Last Name'),
+			'value' => $user->lastName(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+		?>
+	</div>
+
+	<!-- Profile picture tab -->
+	<div class="tab-pane fade" id="picture" role="tabpanel" aria-labelledby="nav-picture-tab">
+		<div class="container">
+			<div class="row">
+				<div class="col-lg-4 col-sm-12 p-0 pr-2">
+					<div class="custom-file">
+						<input type="file" class="custom-file-input" id="jsprofilePictureInputFile" name="profilePictureInputFile">
+						<label class="custom-file-label" for="jsprofilePictureInputFile"><?php $L->p('Upload image'); ?></label>
+					</div>
+					<!-- <button id="jsbuttonRemovePicture" type="button" class="btn btn-primary w-100 mt-4 mb-4"><i class="fa fa-trash"></i> Remove picture</button> -->
+				</div>
+				<div class="col-lg-8 col-sm-12 p-0 text-center">
+					<img id="jsprofilePicturePreview" class="img-fluid img-thumbnail" alt="Profile picture preview" src="<?php echo (Sanitize::pathFile(PATH_UPLOADS_PROFILES . $user->username() . '.png') ? DOMAIN_UPLOADS_PROFILES . $user->username() . '.png?version=' . time() : HTML_PATH_CORE_IMG . 'default.svg') ?>" />
+				</div>
+			</div>
+		</div>
+		<script>
+			// $("#jsbuttonRemovePicture").on("click", function() {
+			// 	var username = $("#jsusername").val();
+			// 	bluditAjax.removeProfilePicture(username);
+			// 	$("#jsprofilePicturePreview").attr("src", "<?php echo HTML_PATH_CORE_IMG . 'default.svg' ?>");
+			// });
+
+			$("#jsprofilePictureInputFile").on("change", function() {
+				var formData = new FormData();
+				formData.append('tokenCSRF', tokenCSRF);
+				formData.append('profilePictureInputFile', $(this)[0].files[0]);
+				formData.append('username', $("#jsusername").val());
+				$.ajax({
+					url: HTML_PATH_ADMIN_ROOT + "ajax/profile-picture-upload",
+					type: "POST",
+					data: formData,
+					cache: false,
+					contentType: false,
+					processData: false
+				}).done(function(data) {
+					if (data.status == 0) {
+						$("#jsprofilePicturePreview").attr('src', data.absoluteURL + "?time=" + Math.random());
+					} else {
+						showAlert(data.message);
+					}
+				});
+			});
+		</script>
+	</div>
+
+	<!-- Security tab -->
+	<div class="tab-pane fade" id="security" role="tabpanel" aria-labelledby="nav-security-tab">
+		<?php
+		echo Bootstrap::formTitle(array('title' => $L->g('Password')));
+
+		echo '
+		<div class="form-group">
+			<a href="' . HTML_PATH_ADMIN_ROOT . 'user-password/' . $user->username() . '" class="btn btn-primary mr-2">' . $L->g('Change password') . '</a>
+		</div>
+		';
+
+		echo Bootstrap::formTitle(array('title' => $L->g('Authentication Token')));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'tokenAuth',
+			'label' => $L->g('Token'),
+			'value' => $user->tokenAuth(),
+			'class' => '',
+			'tip' => $L->g('this-token-is-similar-to-a-password-it-should-not-be-shared')
+		));
+
+		if (checkRole(array('admin'), false)) {
+			echo Bootstrap::formTitle(array('title' => $L->g('Status')));
+
+			echo Bootstrap::formInputText(array(
+				'name' => 'status',
+				'label' => $L->g('Current status'),
+				'value' => $user->enabled() ? $L->g('Enabled') : $L->g('Disabled'),
+				'class' => '',
+				'disabled' => true,
+				'tip' => $user->enabled() ? '' : $L->g('To enable the user you must set a new password')
+			));
+
+			if ($user->enabled()) {
+				echo '
+				<div class="form-group row">
+				<div class="col-sm-2"></div>
+				<div class="col-sm-10">
+					<button type="submit" class="btn btn-warning mr-2" id="jsdisableUser" name="disableUser">' . $L->g('Disable user') . '</button>
+					<button type="submit" class="btn btn-danger mr-2" id="jsdeleteUserAndKeepContent" name="deleteUserAndKeepContent">' . $L->g('Delete user and keep content') . '</button>
+					<button type="submit" class="btn btn-danger mr-2" id="jsdeleteUserAndDeleteContent" name="deleteUserAndDeleteContent">' . $L->g('Delete user and delete content') . '</button>
+				</div>
+				</div>
+				';
+			}
+		}
+		?>
+	</div>
+
+	<!-- Social Networks tab -->
+	<div class="tab-pane fade" id="social" role="tabpanel" aria-labelledby="nav-social-tab">
+		<?php
+		echo Bootstrap::formInputText(array(
+			'name' => 'twitter',
+			'label' => 'Twitter',
+			'value' => $user->twitter(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'facebook',
+			'label' => 'Facebook',
+			'value' => $user->facebook(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'codepen',
+			'label' => 'CodePen',
+			'value' => $user->codepen(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'instagram',
+			'label' => 'Instagram',
+			'value' => $user->instagram(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'gitlab',
+			'label' => 'GitLab',
+			'value' => $user->gitlab(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'github',
+			'label' => 'GitHub',
+			'value' => $user->github(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'linkedin',
+			'label' => 'LinkedIn',
+			'value' => $user->linkedin(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'xing',
+			'label' => 'Xing',
+			'value' => $user->xing(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'telegram',
+			'label' => 'Telegram',
+			'value' => $user->telegram(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'mastodon',
+			'label' => 'Mastodon',
+			'value' => $user->mastodon(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+
+		echo Bootstrap::formInputText(array(
+			'name' => 'vk',
+			'label' => 'VK',
+			'value' => $user->vk(),
+			'class' => '',
+			'placeholder' => '',
+			'tip' => ''
+		));
+		?>
+	</div>
+</div>
+
+<?php echo Bootstrap::formClose(); ?>
+
+<script>
+	// Open current tab after refresh page
+	$(function() {
+		$('a[data-toggle="tab"]').on('click', function(e) {
+			window.localStorage.setItem('activeTab', $(e.target).attr('href'));
+			console.log($(e.target).attr('href'));
+		});
+		var activeTab = window.localStorage.getItem('activeTab');
+		if (activeTab) {
+			$('#nav-tab a[href="' + activeTab + '"]').tab('show');
+			//window.localStorage.removeItem("activeTab");
+		}
+	});
+</script>

bl-kernel/admin/views/login.php

@@ -0,0 +1,37 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+echo '<h1 class="text-center mb-3 mt-3 font-weight-normal" style="color: #555;">' . $site->title() . '</h1>';
+
+echo Bootstrap::formOpen(array());
+
+echo Bootstrap::formInputHidden(array(
+	'name' => 'tokenCSRF',
+	'value' => $security->getTokenCSRF()
+));
+
+echo '
+	<div class="form-group">
+		<input type="text" dir="auto" value="' . (isset($_POST['username']) ? Sanitize::html($_POST['username']) : '') . '" class="form-control form-control-lg" id="jsusername" name="username" placeholder="' . $L->g('Username') . '" autofocus>
+	</div>
+	';
+
+echo '
+	<div class="form-group">
+		<input type="password" class="form-control form-control-lg" id="jspassword" name="password" placeholder="' . $L->g('Password') . '">
+	</div>
+	';
+
+echo '
+	<div class="form-check">
+		<input class="form-check-input" type="checkbox" value="true" id="jsremember" name="remember">
+		<label class="form-check-label" for="jsremember">' . $L->g('Remember me') . '</label>
+	</div>
+
+	<div class="form-group mt-3">
+		<button type="submit" class="btn btn-primary btn-lg mr-2 w-100" name="save">' . $L->g('Login') . '</button>
+	</div>
+	';
+
+echo '</form>';
+
+echo '<p class="mt-3 text-right">' . $L->g('Powered by Bludit') . ((defined('BLUDIT_PRO')) ? ' PRO' : '') . '</p>';

bl-kernel/admin/views/new-category.php

@@ -0,0 +1,39 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php echo Bootstrap::formOpen(array('id'=>'jsform', 'class'=>'tab-content')); ?>
+
+<div class="align-middle">
+	<div class="float-right mt-1">
+		<button type="submit" class="btn btn-primary btn-sm" name="save"><?php $L->p('Save') ?></button>
+		<a class="btn btn-secondary btn-sm" href="<?php echo HTML_PATH_ADMIN_ROOT.'categories' ?>" role="button"><?php $L->p('Cancel') ?></a>
+	</div>
+	<?php echo Bootstrap::pageTitle(array('title'=>$L->g('New category'), 'icon'=>'tag')); ?>
+</div>
+
+<?php
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'tokenCSRF',
+		'value'=>$security->getTokenCSRF()
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name'=>'name',
+		'label'=>$L->g('Name'),
+		'value'=>isset($_POST['category'])?$_POST['category']:'',
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>''
+	));
+
+	echo Bootstrap::formTextarea(array(
+		'name'=>'description',
+		'label'=>$L->g('Description'),
+		'value'=>isset($_POST['description'])?$_POST['description']:'',
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>'',
+		'rows'=>3
+	));
+?>
+
+<?php echo Bootstrap::formClose(); ?>

bl-kernel/admin/views/new-content.php

@@ -0,0 +1,511 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php
+
+// Start form
+echo Bootstrap::formOpen(array(
+	'id' => 'jsform',
+	'class' => 'd-flex flex-column h-100'
+));
+
+// Token CSRF
+echo Bootstrap::formInputHidden(array(
+	'name' => 'tokenCSRF',
+	'value' => $security->getTokenCSRF()
+));
+
+// UUID
+// The UUID is generated in the controller
+echo Bootstrap::formInputHidden(array(
+	'name' => 'uuid',
+	'value' => $uuid
+));
+
+// Type = published, draft, sticky, static
+echo Bootstrap::formInputHidden(array(
+	'name' => 'type',
+	'value' => 'published'
+));
+
+// Cover image
+echo Bootstrap::formInputHidden(array(
+	'name' => 'coverImage',
+	'value' => ''
+));
+
+// Content
+echo Bootstrap::formInputHidden(array(
+	'name' => 'content',
+	'value' => ''
+));
+?>
+
+<!-- TOOLBAR -->
+<div id="jseditorToolbar" class="mb-1">
+	<div id="jseditorToolbarRight" class="btn-group btn-group-sm float-right" role="group" aria-label="Toolbar right">
+		<button type="button" class="btn btn-light" id="jsmediaManagerOpenModal" data-toggle="modal" data-target="#jsmediaManagerModal"><span class="fa fa-image"></span> <?php $L->p('Images') ?></button>
+		<button type="button" class="btn btn-light" id="jsoptionsSidebar" style="z-index:30"><span class="fa fa-cog"></span> <?php $L->p('Options') ?></button>
+	</div>
+
+	<div id="jseditorToolbarLeft">
+		<button id="jsbuttonSave" type="button" class="btn btn-sm btn-primary"><?php $L->p('Save') ?></button>
+		<button id="jsbuttonPreview" type="button" class="btn btn-sm btn-secondary"><?php $L->p('Preview') ?></button>
+		<span id="jsbuttonSwitch" data-switch="publish" class="ml-2 text-secondary switch-button"><i class="fa fa-square switch-icon-publish"></i> <?php $L->p('Publish') ?></span>
+	</div>
+</div>
+<script>
+	$(document).ready(function() {
+		$("#jsoptionsSidebar").on("click", function() {
+			$("#jseditorSidebar").toggle();
+			$("#jsshadow").toggle();
+		});
+
+		$("#jsshadow").on("click", function() {
+			$("#jseditorSidebar").toggle();
+			$("#jsshadow").toggle();
+		});
+	});
+</script>
+
+<!-- SIDEBAR OPTIONS -->
+<div id="jseditorSidebar">
+	<nav>
+		<div class="nav nav-tabs" id="nav-tab" role="tablist">
+			<a class="nav-link active show" id="nav-general-tab" data-toggle="tab" href="#nav-general" role="tab" aria-controls="general"><?php $L->p('General') ?></a>
+			<a class="nav-link" id="nav-advanced-tab" data-toggle="tab" href="#nav-advanced" role="tab" aria-controls="advanced"><?php $L->p('Advanced') ?></a>
+			<?php if (!empty($site->customFields())) : ?>
+				<a class="nav-link" id="nav-custom-tab" data-toggle="tab" href="#nav-custom" role="tab" aria-controls="custom"><?php $L->p('Custom') ?></a>
+			<?php endif ?>
+			<a class="nav-link" id="nav-seo-tab" data-toggle="tab" href="#nav-seo" role="tab" aria-controls="seo"><?php $L->p('SEO') ?></a>
+		</div>
+	</nav>
+
+	<div class="tab-content pr-3 pl-3 pb-3">
+		<div id="nav-general" class="tab-pane fade show active" role="tabpanel" aria-labelledby="general-tab">
+			<?php
+			// Category
+			echo Bootstrap::formSelectBlock(array(
+				'name' => 'category',
+				'label' => $L->g('Category'),
+				'selected' => '',
+				'class' => '',
+				'emptyOption' => '- ' . $L->g('Uncategorized') . ' -',
+				'options' => $categories->getKeyNameArray()
+			));
+
+			// Description
+			echo Bootstrap::formTextareaBlock(array(
+				'name' => 'description',
+				'label' => $L->g('Description'),
+				'selected' => '',
+				'class' => '',
+				'value' => '',
+				'rows' => 5,
+				'placeholder' => $L->get('this-field-can-help-describe-the-content')
+			));
+			?>
+
+			<!-- Cover Image -->
+			<label class="mt-4 mb-2 pb-2 border-bottom text-uppercase w-100"><?php $L->p('Cover Image') ?></label>
+			<div>
+				<img id="jscoverImagePreview" class="mx-auto d-block w-100" alt="Cover image preview" src="<?php echo HTML_PATH_CORE_IMG ?>default.svg" />
+			</div>
+			<div class="mt-2 text-center">
+				<button type="button" id="jsbuttonSelectCoverImage" class="btn btn-primary btn-sm"><?php echo $L->g('Select cover image') ?></button>
+				<button type="button" id="jsbuttonRemoveCoverImage" class="btn btn-secondary btn-sm"><?php echo $L->g('Remove cover image') ?></button>
+			</div>
+			<script>
+				$(document).ready(function() {
+					$("#jscoverImagePreview").on("click", function() {
+						openMediaManager();
+					});
+
+					$("#jsbuttonSelectCoverImage").on("click", function() {
+						openMediaManager();
+					});
+
+					$("#jsbuttonRemoveCoverImage").on("click", function() {
+						$("#jscoverImage").val('');
+						$("#jscoverImagePreview").attr('src', HTML_PATH_CORE_IMG + 'default.svg');
+					});
+				});
+			</script>
+		</div>
+		<div id="nav-advanced" class="tab-pane fade" role="tabpanel" aria-labelledby="advanced-tab">
+			<?php
+			// Date
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'date',
+				'label' => $L->g('Date'),
+				'placeholder' => '',
+				'value' => Date::current(DB_DATE_FORMAT),
+				'tip' => $L->g('date-format-format')
+			));
+
+			// Type
+			echo Bootstrap::formSelectBlock(array(
+				'name' => 'typeSelector',
+				'label' => $L->g('Type'),
+				'selected' => '',
+				'options' => array(
+					'published' => '- ' . $L->g('Default') . ' -',
+					'sticky' => $L->g('Sticky'),
+					'static' => $L->g('Static')
+				),
+				'tip' => ''
+			));
+
+			// Position
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'position',
+				'label' => $L->g('Position'),
+				'tip' => $L->g('Field used when ordering content by position'),
+				'value' => $pages->nextPositionNumber()
+			));
+
+			// Tags
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'tags',
+				'label' => $L->g('Tags'),
+				'placeholder' => '',
+				'tip' => $L->g('Write the tags separated by comma')
+			));
+
+			// Parent
+			echo Bootstrap::formSelectBlock(array(
+				'name' => 'parent',
+				'label' => $L->g('Parent'),
+				'options' => array(),
+				'selected' => false,
+				'class' => '',
+				'tip' => $L->g('Start typing a page title to see a list of suggestions.'),
+			));
+
+			?>
+
+			<script>
+				$(document).ready(function() {
+					var parent = $("#jsparent").select2({
+						placeholder: "",
+						allowClear: true,
+						theme: "bootstrap4",
+						minimumInputLength: 2,
+						ajax: {
+							url: HTML_PATH_ADMIN_ROOT + "ajax/get-published",
+							data: function(params) {
+								var query = {
+									checkIsParent: true,
+									query: params.term
+								}
+								return query;
+							},
+							processResults: function(data) {
+								return data;
+							}
+						},
+						escapeMarkup: function(markup) {
+							return markup;
+						},
+						templateResult: function(data) {
+							var html = data.text;
+							if (data.type == "static") {
+								html += '<span class="badge badge-pill badge-light">' + data.type + '</span>';
+							}
+							return html;
+						}
+					});
+				});
+			</script>
+
+			<?php
+			// Template
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'template',
+				'label' => $L->g('Template'),
+				'placeholder' => '',
+				'value' => '',
+				'tip' => $L->g('Write a template name to filter the page in the theme and change the style of the page.')
+			));
+
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'externalCoverImage',
+				'label' => $L->g('External cover image'),
+				'placeholder' => "https://",
+				'value' => '',
+				'tip' => $L->g('Set a cover image from external URL, such as a CDN or some server dedicated for images.')
+			));
+
+			// Username
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => '',
+				'label' => $L->g('Author'),
+				'placeholder' => '',
+				'value' => $login->username(),
+				'tip' => '',
+				'disabled' => true
+			));
+			?>
+
+			<script>
+				$(document).ready(function() {
+
+					// Changes in External cover image input
+					$("#jsexternalCoverImage").change(function() {
+						$("#jscoverImage").val($(this).val());
+					});
+
+					// Generate slug when the user type the title
+					$("#jstitle").keyup(function() {
+						var text = $(this).val();
+						var parent = $("#jsparent").val();
+						var currentKey = "";
+						var ajax = new bluditAjax();
+						var callBack = $("#jsslug");
+						ajax.generateSlug(text, parent, currentKey, callBack);
+					});
+
+					// Datepicker
+					$("#jsdate").datetimepicker({
+						format: DB_DATE_FORMAT
+					});
+
+
+				});
+			</script>
+		</div>
+		<?php if (!empty($site->customFields())) : ?>
+			<div id="nav-custom" class="tab-pane fade" role="tabpanel" aria-labelledby="custom-tab">
+				<?php
+				$customFields = $site->customFields();
+				foreach ($customFields as $field => $options) {
+					if (!isset($options['position'])) {
+						if ($options['type'] == "string") {
+							echo Bootstrap::formInputTextBlock(array(
+								'name' => 'custom[' . $field . ']',
+								'label' => (isset($options['label']) ? $options['label'] : ''),
+								'value' => (isset($options['default']) ? $options['default'] : ''),
+								'tip' => (isset($options['tip']) ? $options['tip'] : ''),
+								'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : '')
+							));
+						} elseif ($options['type'] == "bool") {
+							echo Bootstrap::formCheckbox(array(
+								'name' => 'custom[' . $field . ']',
+								'label' => (isset($options['label']) ? $options['label'] : ''),
+								'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+								'checked' => (isset($options['checked']) ? true : false),
+								'labelForCheckbox' => (isset($options['tip']) ? $options['tip'] : '')
+							));
+						}
+					}
+				}
+				?>
+			</div>
+		<?php endif ?>
+		<div id="nav-seo" class="tab-pane fade" role="tabpanel" aria-labelledby="seo-tab">
+			<?php
+			// Friendly URL
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'slug',
+				'tip' => $L->g('URL associated with the content'),
+				'label' => $L->g('Friendly URL'),
+				'placeholder' => $L->g('Leave empty for autocomplete by Bludit.')
+			));
+
+			// Robots
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'noindex',
+				'label' => 'Robots',
+				'labelForCheckbox' => $L->g('apply-code-noindex-code-to-this-page'),
+				'placeholder' => '',
+				'checked' => false,
+				'tip' => $L->g('This tells search engines not to show this page in their search results.')
+			));
+
+			// Robots
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'nofollow',
+				'label' => '',
+				'labelForCheckbox' => $L->g('apply-code-nofollow-code-to-this-page'),
+				'placeholder' => '',
+				'checked' => false,
+				'tip' => $L->g('This tells search engines not to follow links on this page.')
+			));
+
+			// Robots
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'noarchive',
+				'label' => '',
+				'labelForCheckbox' => $L->g('apply-code-noarchive-code-to-this-page'),
+				'placeholder' => '',
+				'checked' => false,
+				'tip' => $L->g('This tells search engines not to save a cached copy of this page.')
+			));
+			?>
+		</div>
+	</div>
+</div>
+
+<!-- Custom fields: TOP -->
+<?php
+$customFields = $site->customFields();
+foreach ($customFields as $field => $options) {
+	if (isset($options['position']) && ($options['position'] == 'top')) {
+		if ($options['type'] == "string") {
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'custom[' . $field . ']',
+				'label' => (isset($options['label']) ? $options['label'] : ''),
+				'value' => (isset($options['default']) ? $options['default'] : ''),
+				'tip' => (isset($options['tip']) ? $options['tip'] : ''),
+				'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+				'class' => 'mb-2',
+				'labelClass' => 'mb-2 pb-2 border-bottom text-uppercase w-100'
+
+			));
+		} elseif ($options['type'] == "bool") {
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'custom[' . $field . ']',
+				'label' => (isset($options['label']) ? $options['label'] : ''),
+				'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+				'checked' => (isset($options['checked']) ? true : false),
+				'labelForCheckbox' => (isset($options['tip']) ? $options['tip'] : ''),
+				'class' => 'mb-2',
+				'labelClass' => 'mb-2 pb-2 border-bottom text-uppercase w-100'
+			));
+		}
+	}
+}
+?>
+
+
+<!-- Title -->
+<div id="jseditorTitle" class="form-group mb-1">
+	<input id="jstitle" name="title" type="text" dir="auto" class="form-control form-control-lg rounded-0" value="" placeholder="<?php $L->p('Enter title') ?>">
+</div>
+
+<!-- Editor -->
+<textarea id="jseditor" class="editable h-100 mb-1"></textarea>
+
+<!-- Custom fields: BOTTOM -->
+<?php
+$customFields = $site->customFields();
+foreach ($customFields as $field => $options) {
+	if (isset($options['position']) && ($options['position'] == 'bottom')) {
+		if ($options['type'] == "string") {
+			echo Bootstrap::formInputTextBlock(array(
+				'name' => 'custom[' . $field . ']',
+				'label' => (isset($options['label']) ? $options['label'] : ''),
+				'value' => (isset($options['default']) ? $options['default'] : ''),
+				'tip' => (isset($options['tip']) ? $options['tip'] : ''),
+				'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+				'class' => 'mt-2',
+				'labelClass' => 'mb-2 pb-2 border-bottom text-uppercase w-100'
+
+			));
+		} elseif ($options['type'] == "bool") {
+			echo Bootstrap::formCheckbox(array(
+				'name' => 'custom[' . $field . ']',
+				'label' => (isset($options['label']) ? $options['label'] : ''),
+				'placeholder' => (isset($options['placeholder']) ? $options['placeholder'] : ''),
+				'checked' => (isset($options['checked']) ? true : false),
+				'labelForCheckbox' => (isset($options['tip']) ? $options['tip'] : ''),
+				'class' => 'mt-2',
+				'labelClass' => 'mb-2 pb-2 border-bottom text-uppercase w-100'
+			));
+		}
+	}
+}
+?>
+
+</form>
+
+<!-- Modal for Media Manager -->
+<?php include(PATH_ADMIN_THEMES . 'booty/html/media.php'); ?>
+
+<script>
+	$(document).ready(function() {
+
+		// Define function if they doesn't exist
+		// This helps if the user doesn't activate any plugin as editor
+		if (typeof editorGetContent != "function") {
+			window.editorGetContent = function() {
+				return $("#jseditor").val();
+			};
+		}
+		if (typeof editorInsertMedia != "function") {
+			window.editorInsertMedia = function(filename) {
+				$("#jseditor").val($('#jseditor').val() + '<img src="' + filename + '" alt="">');
+			};
+		}
+		if (typeof editorInsertLinkedMedia != "function") {
+			window.editorInsertLinkedMedia = function(filename, link) {
+				$("#jseditor").val($('#jseditor').val() + '<a href="' + link + '"><img src="' + filename + '" alt=""></a>');
+			};
+		}
+
+		// Button switch
+		$("#jsbuttonSwitch").on("click", function() {
+			if ($(this).data("switch") == "publish") {
+				$(this).html('<i class="fa fa-square switch-icon-draft"></i> <?php $L->p('Draft') ?>');
+				$(this).data("switch", "draft");
+			} else {
+				$(this).html('<i class="fa fa-square switch-icon-publish"></i> <?php $L->p('Publish') ?>');
+				$(this).data("switch", "publish");
+			}
+		});
+
+		// Button preview
+		$("#jsbuttonPreview").on("click", function() {
+			var uuid = $("#jsuuid").val();
+			var title = $("#jstitle").val();
+			var content = editorGetContent();
+			bluditAjax.saveAsDraft(uuid, title, content).then(function(data) {
+				var preview = window.open("<?php echo DOMAIN_PAGES . 'autosave-' . $uuid . '?preview=' . md5('autosave-' . $uuid) ?>", "bludit-preview");
+				preview.focus();
+			});
+		});
+
+		// Button Save
+		$("#jsbuttonSave").on("click", function() {
+			let actionParameters = '';
+
+			// If the switch is setted to "published", get the value from the selector
+			if ($("#jsbuttonSwitch").data("switch") == "publish") {
+				var value = $("#jstypeSelector option:selected").val();
+				$("#jstype").val(value);
+				actionParameters = '#' + value;
+			} else {
+				$("#jstype").val("draft");
+				actionParameters = '#draft';
+			}
+
+			// Get the content
+			$("#jscontent").val(editorGetContent());
+
+			// Submit the form
+			$("#jsform").attr('action', actionParameters);
+			$("#jsform").submit();
+		});
+
+		// Autosave
+		var currentContent = editorGetContent();
+		setInterval(function() {
+			var uuid = $("#jsuuid").val();
+			var title = $("#jstitle").val() + "[<?php $L->p('Autosave') ?>]";
+			var content = editorGetContent();
+			// Autosave when content has at least 100 characters
+			if (content.length < 100) {
+				return false;
+			}
+			// Autosave only when the user change the content
+			if (currentContent != content) {
+				currentContent = content;
+				bluditAjax.saveAsDraft(uuid, title, content).then(function(data) {
+					if (data.status == 0) {
+						showAlert("<?php $L->p('Autosave') ?>");
+					}
+				});
+			}
+		}, 1000 * 60 * AUTOSAVE_INTERVAL);
+
+	});
+</script>

bl-kernel/admin/views/new-user.php

@@ -0,0 +1,67 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php echo Bootstrap::formOpen(array('id'=>'jsform', 'class'=>'tab-content')); ?>
+
+<div class="align-middle">
+	<div class="float-right mt-1">
+		<button type="submit" class="btn btn-primary btn-sm" name="save"><?php $L->p('Save') ?></button>
+		<a class="btn btn-secondary btn-sm" href="<?php echo HTML_PATH_ADMIN_ROOT.'users' ?>" role="button"><?php $L->p('Cancel') ?></a>
+	</div>
+	<?php echo Bootstrap::pageTitle(array('title'=>$L->g('Add a new user'), 'icon'=>'user')); ?>
+</div>
+
+<?php
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'tokenCSRF',
+		'value'=>$security->getTokenCSRF()
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name'=>'new_username',
+		'label'=>$L->g('Username'),
+		'value'=>(isset($_POST['new_username'])?$_POST['new_username']:''),
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name'=>'new_password',
+		'type'=>'password',
+		'label'=>$L->g('Password'),
+		'value'=>'',
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name'=>'confirm_password',
+		'type'=>'password',
+		'label'=>$L->g('Confirm Password'),
+		'value'=>'',
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>''
+	));
+
+	echo Bootstrap::formSelect(array(
+		'name'=>'role',
+		'label'=>$L->g('Role'),
+		'options'=>array('author'=>$L->g('Author'), 'editor'=>$L->g('Editor'), 'admin'=>$L->g('Administrator')),
+		'selected'=>'Author',
+		'class'=>'',
+		'tip'=>$L->g('author-can-write-and-edit-their-own-content')
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name'=>'email',
+		'label'=>$L->g('Email'),
+		'value'=>(isset($_POST['email'])?$_POST['email']:''),
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>''
+	));
+?>
+
+<?php echo Bootstrap::formClose(); ?>

bl-kernel/admin/views/plugins-position.php

@@ -0,0 +1,51 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php echo Bootstrap::formOpen(array('id'=>'jsform', 'class'=>'tab-content')); ?>
+
+<div class="align-middle">
+	<div class="float-right mt-1">
+		<button type="button" class="btn btn-primary btn-sm jsbuttonSave" name="save"><?php $L->p('Save') ?></button>
+		<a class="btn btn-secondary btn-sm" href="<?php echo HTML_PATH_ADMIN_ROOT.'plugins' ?>" role="button"><?php $L->p('Cancel') ?></a>
+	</div>
+	<?php echo Bootstrap::pageTitle(array('title'=>$L->g('Plugins position'), 'icon'=>'tags')); ?>
+</div>
+
+<div class="alert alert-primary"><?php $L->p('Drag and Drop to sort the plugins') ?></div>
+
+<?php
+	// Token CSRF
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'tokenCSRF',
+		'value'=>$security->getTokenCSRF()
+	));
+
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'plugin-list',
+		'value'=>''
+	));
+
+	echo '<ul class="list-group list-group-sortable">';
+	foreach ($plugins['siteSidebar'] as $Plugin) {
+		echo '<li class="list-group-item" data-plugin="'.$Plugin->className().'"><span class="fa fa-arrows-v"></span> '.$Plugin->name().'</li>';
+	}
+	echo '</ul>';
+?>
+
+<?php echo Bootstrap::formClose(); ?>
+
+<script>
+$(document).ready(function() {
+	$('.list-group-sortable').sortable({
+		placeholderClass: 'list-group-item'
+	});
+
+	$(".jsbuttonSave").on("click", function() {
+		var tmp = [];
+		$("li.list-group-item").each(function() {
+			tmp.push( $(this).attr("data-plugin") );
+		});
+		$("#jsplugin-list").attr("value", tmp.join(",") );
+		$("#jsform").submit();
+	});
+});
+</script>

bl-kernel/admin/views/plugins.php

@@ -0,0 +1,125 @@
+<?php
+
+echo Bootstrap::pageTitle(array('title' => $L->g('Plugins'), 'icon' => 'puzzle-piece'));
+
+echo Bootstrap::link(array(
+	'title' => $L->g('Change the position of the plugins'),
+	'href' => HTML_PATH_ADMIN_ROOT . 'plugins-position',
+	'icon' => 'arrows'
+));
+
+echo Bootstrap::formTitle(array('title' => $L->g('Search plugins')));
+
+?>
+
+<input type="text" dir="auto" class="form-control" id="search" placeholder="<?php $L->p('Search') ?>">
+<script>
+	$(document).ready(function() {
+		$("#search").on("keyup", function() {
+			var textToSearch = $(this).val().toLowerCase();
+			$(".searchItem").each(function() {
+				var item = $(this);
+				item.hide();
+				item.find(".searchText").each(function() {
+					var element = $(this).text().toLowerCase();
+					if (element.indexOf(textToSearch) != -1) {
+						item.show();
+					}
+				});
+			});
+		});
+	});
+</script>
+
+<?php
+
+echo Bootstrap::formTitle(array('title' => $L->g('Enabled plugins')));
+
+echo '
+<table class="table">
+	<tbody>
+';
+
+// Show installed plugins
+foreach ($pluginsInstalled as $plugin) {
+
+	if ($plugin->type() == 'theme') {
+		// Do not display theme's plugins
+		continue;
+	}
+
+	echo '<tr id="' . $plugin->className() . '" class="bg-light searchItem">';
+
+	echo '<td class="align-middle pt-3 pb-3 w-25">
+		<div class="searchText">' . $plugin->name() . '</div>
+		<div class="mt-1">';
+	if (method_exists($plugin, 'form')) {
+		echo '<a class="mr-3" href="' . HTML_PATH_ADMIN_ROOT . 'configure-plugin/' . $plugin->className() . '">' . $L->g('Settings') . '</a>';
+	}
+	echo '<a href="' . HTML_PATH_ADMIN_ROOT . 'uninstall-plugin/' . $plugin->className() . '">' . $L->g('Deactivate') . '</a>';
+	echo '</div>';
+	echo '</td>';
+
+	echo '<td class="searchText align-middle d-none d-sm-table-cell">';
+	echo $plugin->description();
+	echo '</td>';
+
+	echo '<td class="text-center align-middle d-none d-lg-table-cell">';
+	echo '<span>' . $plugin->version() . '</span>';
+	echo '</td>';
+
+	echo '<td class="text-center align-middle d-none d-lg-table-cell">
+		<a target="_blank" href="' . $plugin->website() . '">' . $plugin->author() . '</a>
+	</td>';
+
+	echo '</tr>';
+}
+
+echo '
+	</tbody>
+</table>
+';
+
+echo Bootstrap::formTitle(array('title' => $L->g('Disabled plugins')));
+
+echo '
+<table class="table">
+	<tbody>
+';
+
+// Plugins not installed
+$pluginsNotInstalled = array_diff_key($plugins['all'], $pluginsInstalled);
+foreach ($pluginsNotInstalled as $plugin) {
+
+	if ($plugin->type() == 'theme') {
+		// Do not display theme's plugins
+		continue;
+	}
+	echo '<tr id="' . $plugin->className() . '" class="searchItem">';
+
+	echo '<td class="align-middle pt-3 pb-3 w-25">
+		<div class="searchText">' . $plugin->name() . '</div>
+		<div class="mt-1">
+			<a href="' . HTML_PATH_ADMIN_ROOT . 'install-plugin/' . $plugin->className() . '">' . $L->g('Activate') . '</a>
+		</div>
+	</td>';
+
+	echo '<td class="searchText align-middle d-none d-sm-table-cell">';
+	echo $plugin->description();
+	echo '</td>';
+
+	echo '<td class="text-center align-middle d-none d-lg-table-cell">';
+	echo '<span>' . $plugin->version() . '</span>';
+	echo '</td>';
+
+	echo '<td class="text-center align-middle d-none d-lg-table-cell">
+		<a target="_blank" href="' . $plugin->website() . '">' . $plugin->author() . '</a>
+	</td>';
+
+	echo '</tr>';
+}
+
+echo '
+	</tbody>
+</table>
+';

bl-kernel/admin/views/settings.php

@@ -0,0 +1,614 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php echo Bootstrap::formOpen(array('id' => 'jsform', 'class' => 'tab-content')); ?>
+
+<div class="align-middle">
+	<div class="float-right mt-1">
+		<button type="submit" class="btn btn-primary btn-sm" name="save"><?php $L->p('Save') ?></button>
+		<a class="btn btn-secondary btn-sm" href="<?php echo HTML_PATH_ADMIN_ROOT . 'dashboard' ?>" role="button"><?php $L->p('Cancel') ?></a>
+	</div>
+	<?php echo Bootstrap::pageTitle(array('title' => $L->g('Settings'), 'icon' => 'cog')); ?>
+</div>
+
+<!-- TABS -->
+<nav class="mb-3">
+	<div class="nav nav-tabs" id="nav-tab" role="tablist">
+		<a class="nav-item nav-link active" id="nav-general-tab" data-toggle="tab" href="#general" role="tab" aria-controls="nav-general" aria-selected="false"><?php $L->p('General') ?></a>
+		<a class="nav-item nav-link" id="nav-advanced-tab" data-toggle="tab" href="#advanced" role="tab" aria-controls="nav-advanced" aria-selected="false"><?php $L->p('Advanced') ?></a>
+		<a class="nav-item nav-link" id="nav-seo-tab" data-toggle="tab" href="#seo" role="tab" aria-controls="nav-seo" aria-selected="false"><?php $L->p('SEO') ?></a>
+		<a class="nav-item nav-link" id="nav-social-tab" data-toggle="tab" href="#social" role="tab" aria-controls="nav-social" aria-selected="false"><?php $L->p('Social Networks') ?></a>
+		<a class="nav-item nav-link" id="nav-images-tab" data-toggle="tab" href="#images" role="tab" aria-controls="nav-images" aria-selected="false"><?php $L->p('Images') ?></a>
+		<a class="nav-item nav-link" id="nav-language-tab" data-toggle="tab" href="#language" role="tab" aria-controls="nav-language" aria-selected="false"><?php $L->p('Language') ?></a>
+		<a class="nav-item nav-link" id="nav-custom-fields-tab" data-toggle="tab" href="#custom-fields" role="tab" aria-controls="nav-custom-fields" aria-selected="false"><?php $L->p('Custom fields') ?></a>
+		<a class="nav-item nav-link" id="nav-logo-tab" data-toggle="tab" href="#logo" role="tab" aria-controls="nav-logo" aria-selected="false"><?php $L->p('Logo') ?></a>
+	</div>
+</nav>
+
+<?php
+// Token CSRF
+echo Bootstrap::formInputHidden(array(
+	'name' => 'tokenCSRF',
+	'value' => $security->getTokenCSRF()
+));
+?>
+
+<!-- General tab -->
+<div class="tab-pane fade show active" id="general" role="tabpanel" aria-labelledby="general-tab">
+
+	<?php
+	echo Bootstrap::formTitle(array('title' => $L->g('Site')));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'title',
+		'label' => $L->g('Site title'),
+		'value' => $site->title(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('use-this-field-to-name-your-site')
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'slogan',
+		'label' => $L->g('Site slogan'),
+		'value' => $site->slogan(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('use-this-field-to-add-a-catchy-phrase')
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'description',
+		'label' => $L->g('Site description'),
+		'value' => $site->description(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('you-can-add-a-site-description-to-provide')
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'footer',
+		'label' => $L->g('Footer text'),
+		'value' => $site->footer(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('you-can-add-a-small-text-on-the-bottom')
+	));
+	?>
+</div>
+
+<!-- Advanced tab -->
+<div class="tab-pane fade" id="advanced" role="tabpanel" aria-labelledby="advanced-tab">
+	<?php
+	echo Bootstrap::formTitle(array('title' => $L->g('Content')));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'itemsPerPage',
+		'label' => $L->g('Items per page'),
+		'value' => $site->itemsPerPage(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Number of items to show per page')
+	));
+
+	echo Bootstrap::formSelect(array(
+		'name' => 'orderBy',
+		'label' => $L->g('Order content by'),
+		'options' => array('date' => $L->g('Date'), 'position' => $L->g('Position')),
+		'selected' => $site->orderBy(),
+		'class' => '',
+		'tip' => $L->g('order-the-content-by-date-to-build-a-blog')
+	));
+
+	echo Bootstrap::formTitle(array('title' => $L->g('Predefined pages')));
+
+	// Homepage
+	try {
+		$options = array();
+		$homeKey = $site->homepage();
+		if (!empty($homeKey)) {
+			$home = new Page($homeKey);
+			$options = array($homeKey => $home->title());
+		}
+	} catch (Exception $e) {
+		// continue
+	}
+	echo Bootstrap::formSelect(array(
+		'name' => 'homepage',
+		'label' => $L->g('Homepage'),
+		'options' => $options,
+		'selected' => false,
+		'class' => '',
+		'tip' => $L->g('Returning page for the main page')
+	));
+	?>
+	<script>
+		$(document).ready(function() {
+			var homepage = $("#jshomepage").select2({
+				placeholder: "<?php $L->p('Start typing to see a list of suggestions.') ?>",
+				allowClear: true,
+				theme: "bootstrap4",
+				minimumInputLength: 2,
+				ajax: {
+					url: HTML_PATH_ADMIN_ROOT + "ajax/get-published",
+					data: function(params) {
+						var query = {
+							query: params.term
+						}
+						return query;
+					},
+					processResults: function(data) {
+						return data;
+					}
+				},
+				escapeMarkup: function(markup) {
+					return markup;
+				}
+			});
+		});
+	</script>
+
+	<?php
+	// Page not found 404
+	try {
+		$options = array();
+		$pageNotFoundKey = $site->pageNotFound();
+		if (!empty($pageNotFoundKey)) {
+			$pageNotFound = new Page($pageNotFoundKey);
+			$options = array($pageNotFoundKey => $pageNotFound->title());
+		}
+	} catch (Exception $e) {
+		// continue
+	}
+	echo Bootstrap::formSelect(array(
+		'name' => 'pageNotFound',
+		'label' => $L->g('Page not found'),
+		'options' => $options,
+		'selected' => false,
+		'class' => '',
+		'tip' => $L->g('Returning page when the page doesnt exist')
+	));
+	?>
+
+	<script>
+		$(document).ready(function() {
+			var homepage = $("#jspageNotFound").select2({
+				placeholder: "<?php $L->p('Start typing to see a list of suggestions.') ?>",
+				allowClear: true,
+				theme: "bootstrap4",
+				minimumInputLength: 2,
+				ajax: {
+					url: HTML_PATH_ADMIN_ROOT + "ajax/get-published",
+					data: function(params) {
+						var query = {
+							query: params.term
+						}
+						return query;
+					},
+					processResults: function(data) {
+						return data;
+					}
+				},
+				escapeMarkup: function(markup) {
+					return markup;
+				}
+			});
+		});
+	</script>
+
+	<?php
+	echo Bootstrap::formTitle(array('title' => $L->g('Email account settings')));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'emailFrom',
+		'label' => $L->g('Sender email'),
+		'value' => $site->emailFrom(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Emails will be sent from this address')
+	));
+
+	echo Bootstrap::formTitle(array('title' => $L->g('Autosave')));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'autosaveInterval',
+		'label' => $L->g('Interval'),
+		'value' => $site->autosaveInterval(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Number in minutes for every execution of autosave')
+	));
+
+	echo Bootstrap::formTitle(array('title' => $L->g('Site URL')));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'url',
+		'label' => 'URL',
+		'value' => $site->url(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('full-url-of-your-site'),
+		'placeholder' => 'https://'
+	));
+
+	echo Bootstrap::formTitle(array('title' => $L->g('Page content')));
+
+	echo Bootstrap::formSelect(array(
+		'name' => 'markdownParser',
+		'label' => $L->g('Markdown parser'),
+		'options' => array('true' => $L->g('Enabled'), 'false' => $L->g('Disabled')),
+		'selected' => ($site->markdownParser() ? 'true' : 'false'),
+		'class' => '',
+		'tip' => $L->g('Enable the markdown parser for the content of the page.')
+	));
+
+	echo Bootstrap::formTitle(array('title' => $L->g('URL Filters')));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'uriPage',
+		'label' => $L->g('Pages'),
+		'value' => $site->uriFilters('page'),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => DOMAIN_PAGES
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'uriTag',
+		'label' => $L->g('Tags'),
+		'value' => $site->uriFilters('tag'),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => DOMAIN_TAGS
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'uriCategory',
+		'label' => $L->g('Category'),
+		'value' => $site->uriFilters('category'),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => DOMAIN_CATEGORIES
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'uriBlog',
+		'label' => $L->g('Blog'),
+		'value' => $site->uriFilters('blog'),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => DOMAIN . $site->uriFilters('blog'),
+		'disabled' => Text::isEmpty($site->uriFilters('blog'))
+	));
+	?>
+</div>
+
+<!-- SEO tab -->
+<div class="tab-pane fade" id="seo" role="tabpanel" aria-labelledby="seo-tab">
+	<?php
+	echo Bootstrap::formTitle(array('title' => $L->g('Extreme friendly URL')));
+
+	echo Bootstrap::formSelect(array(
+		'name' => 'extremeFriendly',
+		'label' => $L->g('Allow Unicode'),
+		'options' => array('true' => $L->g('Enabled'), 'false' => $L->g('Disabled')),
+		'selected' => ($site->extremeFriendly() ? 'true' : 'false'),
+		'class' => '',
+		'tip' => $L->g('Allow unicode characters in the URL and some part of the system.')
+	));
+
+	echo Bootstrap::formTitle(array('title' => $L->g('Title formats')));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'titleFormatHomepage',
+		'label' => $L->g('Homepage'),
+		'value' => $site->titleFormatHomepage(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Variables allowed') . ' <code>{{site-title}}</code> <code>{{site-slogan}}</code> <code>{{site-description}}</code>',
+		'placeholder' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'titleFormatPages',
+		'label' => $L->g('Pages'),
+		'value' => $site->titleFormatPages(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Variables allowed') . ' <code>{{page-title}}</code> <code>{{page-description}}</code> <code>{{site-title}}</code> <code>{{site-slogan}}</code> <code>{{site-description}}</code>',
+		'placeholder' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'titleFormatCategory',
+		'label' => $L->g('Category'),
+		'value' => $site->titleFormatCategory(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Variables allowed') . ' <code>{{category-name}}</code> <code>{{site-title}}</code> <code>{{site-slogan}}</code> <code>{{site-description}}</code>',
+		'placeholder' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'titleFormatTag',
+		'label' => $L->g('Tag'),
+		'value' => $site->titleFormatTag(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Variables allowed') . ' <code>{{tag-name}}</code> <code>{{site-title}}</code> <code>{{site-slogan}}</code> <code>{{site-description}}</code>',
+		'placeholder' => ''
+	));
+	?>
+</div>
+
+<!-- Social Network tab -->
+<div class="tab-pane fade" id="social" role="tabpanel" aria-labelledby="social-tab">
+	<?php
+	echo Bootstrap::formInputText(array(
+		'name' => 'twitter',
+		'label' => 'Twitter',
+		'value' => $site->twitter(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'facebook',
+		'label' => 'Facebook',
+		'value' => $site->facebook(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'codepen',
+		'label' => 'CodePen',
+		'value' => $site->codepen(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'instagram',
+		'label' => 'Instagram',
+		'value' => $site->instagram(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'gitlab',
+		'label' => 'GitLab',
+		'value' => $site->gitlab(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'github',
+		'label' => 'GitHub',
+		'value' => $site->github(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'linkedin',
+		'label' => 'LinkedIn',
+		'value' => $site->linkedin(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'xing',
+		'label' => 'Xing',
+		'value' => $site->xing(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'telegram',
+		'label' => 'Telegram',
+		'value' => $site->telegram(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'mastodon',
+		'label' => 'Mastodon',
+		'value' => $site->mastodon(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'dribbble',
+		'label' => 'Dribbble',
+		'value' => $site->dribbble(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'vk',
+		'label' => 'VK',
+		'value' => $site->vk(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => ''
+	));
+	?>
+</div>
+
+<!-- Images tab -->
+<div class="tab-pane fade" id="images" role="tabpanel" aria-labelledby="images-tab">
+	<?php
+	echo Bootstrap::formTitle(array('title' => $L->g('Thumbnails')));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'thumbnailWidth',
+		'label' => $L->g('Width'),
+		'value' => $site->thumbnailWidth(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Thumbnail width in pixels')
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'thumbnailHeight',
+		'label' => $L->g('Height'),
+		'value' => $site->thumbnailHeight(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Thumbnail height in pixels')
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'thumbnailQuality',
+		'label' => $L->g('Quality'),
+		'value' => $site->thumbnailQuality(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Thumbnail quality in percentage')
+	));
+	?>
+</div>
+
+<!-- Timezone and language tab -->
+<div class="tab-pane fade" id="language" role="tabpanel" aria-labelledby="language-tab">
+	<?php
+	echo Bootstrap::formTitle(array('title' => $L->g('Language and timezone')));
+
+	echo Bootstrap::formSelect(array(
+		'name' => 'language',
+		'label' => $L->g('Language'),
+		'options' => $L->getLanguageList(),
+		'selected' => $site->language(),
+		'class' => '',
+		'tip' => $L->g('select-your-sites-language')
+	));
+
+	echo Bootstrap::formSelect(array(
+		'name' => 'timezone',
+		'label' => $L->g('Timezone'),
+		'options' => Date::timezoneList(),
+		'selected' => $site->timezone(),
+		'class' => '',
+		'tip' => $L->g('select-a-timezone-for-a-correct')
+	));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'locale',
+		'label' => $L->g('Locale'),
+		'value' => $site->locale(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('with-the-locales-you-can-set-the-regional-user-interface')
+	));
+
+	echo Bootstrap::formTitle(array('title' => $L->g('Date and time formats')));
+
+	echo Bootstrap::formInputText(array(
+		'name' => 'dateFormat',
+		'label' => $L->g('Date format'),
+		'value' => $site->dateFormat(),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('Current format') . ': ' . Date::current($site->dateFormat())
+	));
+	?>
+</div>
+
+<!-- Custom fields -->
+<div class="tab-pane fade" id="custom-fields" role="tabpanel" aria-labelledby="custom-fields-tab">
+	<?php
+	echo Bootstrap::formTitle(array('title' => $L->g('Custom fields')));
+
+	echo Bootstrap::formTextarea(array(
+		'name' => 'customFields',
+		'label' => 'JSON Format',
+		'value' => json_encode($site->customFields(), JSON_PRETTY_PRINT),
+		'class' => '',
+		'placeholder' => '',
+		'tip' => $L->g('define-custom-fields-for-the-content'),
+		'rows' => 15
+	));
+	?>
+</div>
+
+<!-- Site logo tab -->
+<div class="tab-pane fade" id="logo" role="tabpanel" aria-labelledby="logo-tab">
+	<?php
+	echo Bootstrap::formTitle(array('title' => $L->g('Site logo')));
+	?>
+
+	<div class="container">
+		<div class="row">
+			<div class="col-lg-4 col-sm-12 p-0 pr-2">
+				<div class="custom-file">
+					<input id="jssiteLogoInputFile" class="custom-file-input" type="file" name="inputFile">
+					<label for="jssiteLogoInputFile" class="custom-file-label"><?php $L->p('Upload image'); ?></label>
+				</div>
+				<button id="jsbuttonRemoveLogo" type="button" class="btn btn-primary w-100 mt-4 mb-4"><i class="fa fa-trash"></i><?php $L->p('Remove logo') ?></button>
+			</div>
+			<div class="col-lg-8 col-sm-12 p-0 text-center">
+				<img id="jssiteLogoPreview" class="img-fluid img-thumbnail" alt="Site logo preview" src="<?php echo ($site->logo() ? DOMAIN_UPLOADS . $site->logo(false) . '?version=' . time() : HTML_PATH_CORE_IMG . 'default.svg') ?>" />
+			</div>
+		</div>
+	</div>
+	<script>
+		$("#jsbuttonRemoveLogo").on("click", function() {
+			bluditAjax.removeLogo();
+			$("#jssiteLogoPreview").attr("src", "<?php echo HTML_PATH_CORE_IMG . 'default.svg' ?>");
+		});
+
+		$("#jssiteLogoInputFile").on("change", function() {
+			var formData = new FormData();
+			formData.append('tokenCSRF', tokenCSRF);
+			formData.append('inputFile', $(this)[0].files[0]);
+			$.ajax({
+				url: HTML_PATH_ADMIN_ROOT + "ajax/logo-upload",
+				type: "POST",
+				data: formData,
+				cache: false,
+				contentType: false,
+				processData: false
+			}).done(function(data) {
+				if (data.status == 0) {
+					$("#jssiteLogoPreview").attr('src', data.absoluteURL + "?time=" + Math.random());
+				} else {
+					showAlert(data.message);
+				}
+			});
+		});
+	</script>
+</div>
+
+<?php echo Bootstrap::formClose(); ?>
+
+<script>
+	// Open current tab after refresh page
+	$(function() {
+		$('a[data-toggle="tab"]').on('click', function(e) {
+			window.localStorage.setItem('activeTab', $(e.target).attr('href'));
+		});
+		var activeTab = window.localStorage.getItem('activeTab');
+		if (activeTab) {
+			$('#nav-tab a[href="' + activeTab + '"]').tab('show');
+			//window.localStorage.removeItem("activeTab");
+		}
+	});
+</script>

bl-kernel/admin/views/themes.php

@@ -0,0 +1,57 @@
+<?php
+
+echo Bootstrap::pageTitle(array('title' => $L->g('Themes'), 'icon' => 'desktop'));
+
+echo '
+<table class="table  mt-3">
+	<thead>
+		<tr>
+			<th class="border-bottom-0 w-25" scope="col">' . $L->g('Name') . '</th>
+			<th class="border-bottom-0 d-none d-sm-table-cell" scope="col">' . $L->g('Description') . '</th>
+			<th class="text-center border-bottom-0 d-none d-lg-table-cell" scope="col">' . $L->g('Version') . '</th>
+			<th class="text-center border-bottom-0 d-none d-lg-table-cell" scope="col">' . $L->g('Author') . '</th>
+		</tr>
+	</thead>
+	<tbody>
+';
+
+foreach ($themes as $theme) {
+  echo '
+	<tr ' . ($theme['dirname'] == $site->theme() ? 'class="bg-light"' : '') . '>
+		<td class="align-middle pt-3 pb-3">
+		<div>'.$theme['name'].($theme['dirname']==$site->theme()?'<span class="badge badge-primary ml-2">'.$L->g('Active').'</span>':'').'</div>
+			<div class="mt-1">
+	';
+
+  if ($theme['dirname'] != $site->theme()) {
+    echo '<a href="' . HTML_PATH_ADMIN_ROOT . 'install-theme/' . $theme['dirname'] . '">' . $L->g('Activate') . '</a>';
+  } else {
+    if (isset($theme['plugin'])) {
+      echo '<a href="' . HTML_PATH_ADMIN_ROOT . 'configure-plugin/' . $theme['plugin'] . '">' . $L->g('Settings') . '</a>';
+    }
+  }
+
+  echo '
+			</div>
+		</td>
+	';
+
+  echo '<td class="align-middle d-none d-sm-table-cell">';
+  echo $theme['description'];
+  echo '</td>';
+
+  echo '<td class="text-center align-middle d-none d-lg-table-cell">';
+  echo '<span>' . $theme['version'] . '</span>';
+  echo '</td>';
+
+  echo '<td class="text-center align-middle d-none d-lg-table-cell">
+		<a target="_blank" href="' . $theme['website'] . '">' . $theme['author'] . '</a>
+	</td>';
+
+  echo '</tr>';
+}
+
+echo '
+	</tbody>
+</table>
+';

bl-kernel/admin/views/user-password.php

@@ -0,0 +1,60 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php echo Bootstrap::formOpen(array('id'=>'jsform', 'class'=>'tab-content')); ?>
+
+<div class="align-middle">
+	<div class="float-right mt-1">
+		<button type="submit" class="btn btn-primary btn-sm" name="save"><?php $L->p('Save') ?></button>
+		<a class="btn btn-secondary btn-sm" href="<?php echo HTML_PATH_ADMIN_ROOT.'edit-user/'.$user->username() ?>" role="button"><?php $L->p('Cancel') ?></a>
+	</div>
+	<?php echo Bootstrap::pageTitle(array('title'=>$L->g('Change password'), 'icon'=>'user')); ?>
+</div>
+
+<?php
+	// Token CSRF
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'tokenCSRF',
+		'value'=>$security->getTokenCSRF()
+	));
+
+	// Username
+	echo Bootstrap::formInputHidden(array(
+		'name'=>'username',
+		'value'=>$user->username()
+	));
+
+	// Username disabled
+	echo Bootstrap::formInputText(array(
+		'name'=>'usernameDisabled',
+		'label'=>$L->g('Username'),
+		'value'=>$user->username(),
+		'class'=>'',
+		'placeholder'=>'',
+		'disabled'=>true,
+		'tip'=>''
+	));
+
+	// New password
+	echo Bootstrap::formInputText(array(
+		'name'=>'newPassword',
+		'label'=>$L->g('New password'),
+		'type'=>'password',
+		'value'=>'',
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>''
+	));
+
+	// Confirm password
+	echo Bootstrap::formInputText(array(
+		'name'=>'confirmPassword',
+		'label'=>$L->g('Confirm new password'),
+		'type'=>'password',
+		'value'=>'',
+		'class'=>'',
+		'placeholder'=>'',
+		'tip'=>''
+	));
+?>
+
+<?php echo Bootstrap::formClose(); ?>

bl-kernel/admin/views/users.php

@@ -0,0 +1,56 @@
+<?php defined('BLUDIT') or die('Bludit CMS.'); ?>
+
+<?php
+
+echo Bootstrap::pageTitle(array('title'=>$L->g('Users'), 'icon'=>'users'));
+
+echo Bootstrap::link(array(
+	'title'=>$L->g('add-a-new-user'),
+	'href'=>HTML_PATH_ADMIN_ROOT.'new-user',
+	'icon'=>'plus'
+));
+
+echo '
+<table class="table table-striped mt-3">
+	<thead>
+		<tr>
+			<th class="border-bottom-0" scope="col">'.$L->g('Username').'</th>
+			<th class="border-bottom-0 d-none d-lg-table-cell" scope="col">'.$L->g('Nickname').'</th>
+			<th class="border-bottom-0" scope="col">'.$L->g('Email').'</th>
+			<th class="border-bottom-0" scope="col">'.$L->g('Status').'</th>
+			<th class="border-bottom-0" scope="col">'.$L->g('Role').'</th>
+			<th class="border-bottom-0 d-none d-lg-table-cell" scope="col">'.$L->g('Registered').'</th>
+		</tr>
+	</thead>
+	<tbody>
+';
+
+$list = $users->keys();
+foreach ($list as $username) {
+	try {
+		$user = new User($username);
+		echo '<tr>';
+		echo '<td><img class="profilePicture mr-1" alt="" src="'.(Sanitize::pathFile(PATH_UPLOADS_PROFILES.$user->username().'.png')?DOMAIN_UPLOADS_PROFILES.$user->username().'.png':HTML_PATH_CORE_IMG.'default.svg').'" /><a href="'.HTML_PATH_ADMIN_ROOT.'edit-user/'.$username.'">'.$username.'</a></td>';
+		echo '<td class="d-none d-lg-table-cell">'.$user->nickname().'</td>';
+		echo '<td>'.$user->email().'</td>';
+		echo '<td>'.($user->enabled()?'<b>'.$L->g('Enabled').'</b>':$L->g('Disabled')).'</td>';
+		if ($user->role()=='admin') {
+			echo '<td>'.$L->g('Administrator').'</td>';
+		} elseif ($user->role()=='editor') {
+			echo '<td>'.$L->g('Editor').'</td>';
+		} elseif ($user->role()=='author') {
+			echo '<td>'.$L->g('Author').'</td>';
+		} else {
+			echo '<td>'.$L->g('Reader').'</td>';
+		}
+		echo '<td class="d-none d-lg-table-cell">'.Date::format($user->registered(), DB_DATE_FORMAT, ADMIN_PANEL_DATE_FORMAT).'</td>';
+		echo '</tr>';
+	} catch (Exception $e) {
+		// Continue
+	}
+}
+
+echo '
+	</tbody>
+</table>
+';

bl-kernel/ajax/clippy.php

@@ -0,0 +1,68 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+// $_GET
+// ----------------------------------------------------------------------------
+// (string) $_GET['query']
+$query = isset($_GET['query']) ? Text::lowercase($_GET['query']) : false;
+// ----------------------------------------------------------------------------
+if ($query===false) {
+	ajaxResponse(1, 'Invalid query.');
+}
+
+$result = array();
+
+// MENU
+if (Text::stringContains(Text::lowercase($L->g('New content')), $query)) {
+	$tmp = array('disabled'=>true, 'icon'=>'plus-circle', 'type'=>'menu');
+	$tmp['text'] = $L->g('New content');
+	$tmp['url'] = HTML_PATH_ADMIN_ROOT.'new-content';
+	array_push($result, $tmp);
+}
+if (Text::stringContains(Text::lowercase($L->g('New category')), $query)) {
+	$tmp = array('disabled'=>true, 'icon'=>'tag', 'type'=>'menu');
+	$tmp['text'] = $L->g('New category');
+	$tmp['url'] = HTML_PATH_ADMIN_ROOT.'new-category';
+	array_push($result, $tmp);
+}
+if (Text::stringContains(Text::lowercase($L->g('New user')), $query)) {
+	$tmp = array('disabled'=>true, 'icon'=>'user', 'type'=>'menu');
+	$tmp['text'] = $L->g('New user');
+	$tmp['url'] = HTML_PATH_ADMIN_ROOT.'new-user';
+	array_push($result, $tmp);
+}
+if (Text::stringContains(Text::lowercase($L->g('Categories')), $query)) {
+	$tmp = array('disabled'=>true, 'icon'=>'tags', 'type'=>'menu');
+	$tmp['text'] = $L->g('Categories');
+	$tmp['url'] = HTML_PATH_ADMIN_ROOT.'categories';
+	array_push($result, $tmp);
+}
+if (Text::stringContains(Text::lowercase($L->g('Users')), $query)) {
+	$tmp = array('disabled'=>true, 'icon'=>'users', 'type'=>'menu');
+	$tmp['text'] = $L->g('Users');
+	$tmp['url'] = HTML_PATH_ADMIN_ROOT.'users';
+	array_push($result, $tmp);
+}
+
+
+// PAGES
+$pagesKey = $pages->getDB();
+foreach ($pagesKey as $pageKey) {
+	try {
+		$page = new Page($pageKey);
+		$lowerTitle = Text::lowercase($page->title());
+		if (Text::stringContains($lowerTitle, $query)) {
+			$tmp = array('disabled'=>true);
+			$tmp['id'] = $page->key();
+			$tmp['text'] = $page->title();
+			$tmp['type'] = $page->type();
+			array_push($result, $tmp);
+		}
+	} catch (Exception $e) {
+		// continue
+	}
+}
+
+exit (json_encode(array('results'=>$result)));
+
+?>

bl-kernel/ajax/content-get-list.php

@@ -0,0 +1,49 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Search for pages that have in the title the string $query and returns the array of pages
+|
+| @_GET['published']	boolean	True to search in published database
+| @_GET['static']	boolean True to search in static database
+| @_GET['sticky']	boolean True to search in sticky database
+| @_GET['scheduled']	boolean True to search in scheduled database
+| @_GET['draft']	boolean True to search in draft database
+| @_GET['query']	string	Text to search in the title
+|
+| @return		array
+*/
+
+// $_GET
+// ----------------------------------------------------------------------------
+$published = empty($_GET['published']) ? false:true;
+$static = empty($_GET['static']) ? false:true;
+$sticky = empty($_GET['sticky']) ? false:true;
+$scheduled = empty($_GET['scheduled']) ? false:true;
+$draft = empty($_GET['draft']) ? false:true;
+$query = isset($_GET['query']) ? Text::lowercase($_GET['query']) : false;
+// ----------------------------------------------------------------------------
+
+if ($query===false) {
+	ajaxResponse(1, 'Invalid query.');
+}
+
+$pageNumber = 1;
+$numberOfItems = -1;
+$pagesKey = $pages->getList($pageNumber, $numberOfItems, $published, $static, $sticky, $draft, $scheduled);
+$tmp = array();
+foreach ($pagesKey as $pageKey) {
+	try {
+		$page = new Page($pageKey);
+		$lowerTitle = Text::lowercase($page->title());
+		if (Text::stringContains($lowerTitle, $query)) {
+			$tmp[$page->key()] = $page->json(true);
+		}
+	} catch (Exception $e) {
+		// continue
+	}
+}
+
+exit (json_encode($tmp));
+
+?>

bl-kernel/ajax/delete-image.php

@@ -0,0 +1,43 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Delete an image from a particular page
+|
+| @_POST['filename']	string	Name of the file to delete
+| @_POST['uuid']	string	Page UUID
+|
+| @return	array
+*/
+
+// $_POST
+// ----------------------------------------------------------------------------
+$filename = isset($_POST['filename']) ? $_POST['filename'] : false;
+$uuid = empty($_POST['uuid']) ? false : $_POST['uuid'];
+// ----------------------------------------------------------------------------
+
+if ($filename===false) {
+	ajaxResponse(1, 'The filename is empty.');
+}
+
+if ($uuid && IMAGE_RESTRICT) {
+	$imagePath = PATH_UPLOADS_PAGES.$uuid.DS;
+	$thumbnailPath = PATH_UPLOADS_PAGES.$uuid.DS.'thumbnails'.DS;
+} else {
+	$imagePath = PATH_UPLOADS;
+	$thumbnailPath = PATH_UPLOADS_THUMBNAILS;
+}
+
+// Delete image
+if (Sanitize::pathFile($imagePath.$filename)) {
+	Filesystem::rmfile($imagePath.$filename);
+}
+
+// Delete thumbnail
+if (Sanitize::pathFile($thumbnailPath.$filename)) {
+	Filesystem::rmfile($thumbnailPath.$filename);
+}
+
+ajaxResponse(0, 'Image deleted.');
+
+?>

bl-kernel/ajax/generate-slug.php

@@ -0,0 +1,27 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Generate an slug text for the URL
+|
+| @_POST['text']	string 	The text from where is generated the slug
+| @_POST['parentKey']	string	The parent key if the page has one
+| @_POST['currentKey']	string	The current page key
+|
+| @return	array
+*/
+
+// $_POST
+// ----------------------------------------------------------------------------
+$text 	= isset($_POST['text']) ? $_POST['text'] : '';
+$parent = isset($_POST['parentKey']) ? $_POST['parentKey'] : '';
+$oldKey = isset($_POST['currentKey']) ? $_POST['currentKey'] : '';
+// ----------------------------------------------------------------------------
+
+$slug = $pages->generateKey($text, $parent, $returnSlug=true, $oldKey);
+
+ajaxResponse(0, 'Slug generated.', array(
+	'slug'=>$slug
+));
+
+?>

bl-kernel/ajax/get-published.php

@@ -0,0 +1,50 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Returns a list of pages and the title contains the query string
+| The returned list have published, sticky and statics pages
+|
+| @_POST['query']	string 	The string to search in the title of the pages
+|
+| @return	array
+*/
+
+// $_GET
+// ----------------------------------------------------------------------------
+// (string) $_GET['query']
+$query = isset($_GET['query']) ? Text::lowercase($_GET['query']) : false;
+// (boolean) $_GET['checkIsParent']
+$checkIsParent = empty($_GET['checkIsParent']) ? false : true;
+// ----------------------------------------------------------------------------
+if ($query===false) {
+	ajaxResponse(1, 'Invalid query.');
+}
+
+$result = array();
+$pagesKey = $pages->getDB();
+foreach ($pagesKey as $pageKey) {
+	try {
+		$page = new Page($pageKey);
+		if ($page->isParent() || !$checkIsParent) {
+			// Check page status
+			if ($page->published() || $page->sticky() || $page->isStatic()) {
+				// Check if the query contains in the title
+				$lowerTitle = Text::lowercase($page->title());
+				if (Text::stringContains($lowerTitle, $query)) {
+					$tmp = array('disabled'=>false);
+					$tmp['id'] = $page->key();
+					$tmp['text'] = $page->title();
+					$tmp['type'] = $page->type();
+					array_push($result, $tmp);
+				}
+			}
+		}
+	} catch (Exception $e) {
+		// continue
+	}
+}
+
+exit (json_encode(array('results'=>$result)));
+
+?>

bl-kernel/ajax/list-images.php

@@ -0,0 +1,62 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Returns a list of images from a particular page
+|
+| @_POST['pageNumber']	int	Page number for the paginator
+| @_POST['path']	string	Pre-defined name for the directory to read, its pre-defined to avoid security issues
+| @_POST['uuid']	string	Page UUID
+|
+| @return	array
+*/
+
+// $_POST
+// ----------------------------------------------------------------------------
+// $_POST['pageNumber'] > 0
+$pageNumber = empty($_POST['pageNumber']) ? 1 : (int)$_POST['pageNumber'];
+$pageNumber = $pageNumber - 1;
+
+$path = empty($_POST['path']) ? false : $_POST['path'];
+$uuid = empty($_POST['uuid']) ? false : $_POST['uuid'];
+// ----------------------------------------------------------------------------
+
+// Set the path to get the file list
+if ($path=='thumbnails') {
+	if ($uuid && IMAGE_RESTRICT) {
+		$path = PATH_UPLOADS_PAGES.$uuid.DS.'thumbnails'.DS;
+	} else {
+		$path = PATH_UPLOADS_THUMBNAILS;
+	}
+} else {
+	ajaxResponse(1, 'Invalid path.');
+}
+
+// Get all files from the directory $path, also split the array by numberOfItems
+// The function listFiles split in chunks
+$listOfFilesByPage = Filesystem::listFiles($path, '*', '*', MEDIA_MANAGER_SORT_BY_DATE, MEDIA_MANAGER_NUMBER_OF_FILES);
+
+// Check if the page number exists in the chunks
+if (isset($listOfFilesByPage[$pageNumber])) {
+
+	// Get only the filename from the chunk
+	$files = array();
+	foreach ($listOfFilesByPage[$pageNumber] as $file) {
+		$filename = basename($file);
+		array_push($files, $filename);
+	}
+
+	// Returns the number of chunks for the paginator
+	// Returns the files inside the chunk
+	ajaxResponse(0, 'List of files and number of chunks.', array(
+		'numberOfPages'=>count($listOfFilesByPage),
+		'files'=>$files
+	));
+}
+
+ajaxResponse(0, 'List of files and number of chunks.', array(
+	'numberOfPages'=>0,
+	'files'=>array()
+));
+
+?>

bl-kernel/ajax/logo-remove.php

@@ -0,0 +1,22 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Delete the site logo
+| This script delete the file and set and empty string in the database
+|
+| @return	array
+*/
+
+// Delete the file
+$logoFilename = $site->logo(false);
+if ($logoFilename) {
+	Filesystem::rmfile(PATH_UPLOADS.$logoFilename);
+}
+
+// Remove the logo from the database
+$site->set(array('logo'=>''));
+
+ajaxResponse(0, 'Logo removed.');
+
+?>

bl-kernel/ajax/logo-upload.php

@@ -0,0 +1,70 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Upload site logo
+| The final filename is the site's name and the extension is the same as the file uploaded
+|
+| @_FILES['inputFile']	multipart/form-data	File from form
+|
+| @return	array
+*/
+
+if (!isset($_FILES['inputFile'])) {
+	ajaxResponse(1, 'Error trying to upload the site logo.');
+}
+
+// Check path traversal on $filename
+if (Text::stringContains($_FILES['inputFile']['name'], DS, false)) {
+	$message = 'Path traversal detected.';
+	Log::set($message, LOG_TYPE_ERROR);
+	ajaxResponse(1, $message);
+}
+
+// File extension
+$fileExtension = Filesystem::extension($_FILES['inputFile']['name']);
+$fileExtension = Text::lowercase($fileExtension);
+if (!in_array($fileExtension, $GLOBALS['ALLOWED_IMG_EXTENSION'])) {
+	$message = $L->g('File type is not supported. Allowed types:').' '.implode(', ',$GLOBALS['ALLOWED_IMG_EXTENSION']);
+	Log::set($message, LOG_TYPE_ERROR);
+	ajaxResponse(1, $message);
+}
+
+// File MIME Type
+$fileMimeType = Filesystem::mimeType($_FILES['inputFile']['tmp_name']);
+if ($fileMimeType!==false) {
+	if (!in_array($fileMimeType, $GLOBALS['ALLOWED_IMG_MIMETYPES'])) {
+		$message = $L->g('File mime type is not supported. Allowed types:').' '.implode(', ',$GLOBALS['ALLOWED_IMG_MIMETYPES']);
+		Log::set($message, LOG_TYPE_ERROR);
+		ajaxResponse(1, $message);
+	}
+}
+
+// Final filename
+$filename = 'logo.'.$fileExtension;
+if (Text::isNotEmpty( $site->title() )) {
+	$filename = $site->title().'.'.$fileExtension;
+}
+
+// Delete old image
+$oldFilename = $site->logo(false);
+if ($oldFilename) {
+	Filesystem::rmfile(PATH_UPLOADS.$oldFilename);
+}
+
+// Move from temporary directory to uploads
+Filesystem::mv($_FILES['inputFile']['tmp_name'], PATH_UPLOADS.$filename);
+
+// Permissions
+chmod(PATH_UPLOADS.$filename, 0644);
+
+// Store the filename in the database
+$site->set(array('logo'=>$filename));
+
+ajaxResponse(0, 'Image uploaded.', array(
+	'filename'=>$filename,
+	'absoluteURL'=>DOMAIN_UPLOADS.$filename,
+	'absolutePath'=>PATH_UPLOADS.$filename
+));
+
+?>

bl-kernel/ajax/profile-picture-upload.php

@@ -0,0 +1,74 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+// $_POST
+// ----------------------------------------------------------------------------
+// (string) $_POST['username']
+$username = empty($_POST['username']) ? false : $_POST['username'];
+// ----------------------------------------------------------------------------
+
+if ($username===false) {
+	ajaxResponse(1, 'Error in username.');
+}
+
+if ( ($login->role()!='admin') && ($login->username()!=$username) ) {
+	ajaxResponse(1, 'Error in username.');
+}
+
+if (!isset($_FILES['profilePictureInputFile'])) {
+	ajaxResponse(1, 'Error trying to upload the profile picture.');
+}
+
+// Check path traversal
+if (Text::stringContains($username, DS, false)) {
+	$message = 'Path traversal detected.';
+	Log::set($message, LOG_TYPE_ERROR);
+	ajaxResponse(1, $message);
+}
+
+// Check file extension
+$fileExtension = Filesystem::extension($_FILES['profilePictureInputFile']['name']);
+$fileExtension = Text::lowercase($fileExtension);
+if (!in_array($fileExtension, $GLOBALS['ALLOWED_IMG_EXTENSION']) ) {
+	$message = $L->g('File type is not supported. Allowed types:').' '.implode(', ',$GLOBALS['ALLOWED_IMG_EXTENSION']);
+	Log::set($message, LOG_TYPE_ERROR);
+	ajaxResponse(1, $message);
+}
+
+// Check file MIME Type
+$fileMimeType = Filesystem::mimeType($_FILES['profilePictureInputFile']['tmp_name']);
+if ($fileMimeType!==false) {
+	if (!in_array($fileMimeType, $GLOBALS['ALLOWED_IMG_MIMETYPES'])) {
+		$message = $L->g('File mime type is not supported. Allowed types:').' '.implode(', ',$GLOBALS['ALLOWED_IMG_MIMETYPES']);
+		Log::set($message, LOG_TYPE_ERROR);
+		ajaxResponse(1, $message);
+	}
+}
+
+// Tmp filename
+$tmpFilename = $username.'.'.$fileExtension;
+
+// Final filename
+$filename = $username.'.png';
+
+// Move from temporary directory to uploads folder
+rename($_FILES['profilePictureInputFile']['tmp_name'], PATH_TMP.$tmpFilename);
+
+// Resize and convert to png
+$image = new Image();
+$image->setImage(PATH_TMP.$tmpFilename, PROFILE_IMG_WIDTH, PROFILE_IMG_HEIGHT, 'crop');
+$image->saveImage(PATH_UPLOADS_PROFILES.$filename, PROFILE_IMG_QUALITY, false, true);
+
+// Delete temporary file
+Filesystem::rmfile(PATH_TMP.$tmpFilename);
+
+// Permissions
+chmod(PATH_UPLOADS_PROFILES.$filename, 0644);
+
+ajaxResponse(0, 'Image uploaded.', array(
+	'filename'=>$filename,
+	'absoluteURL'=>DOMAIN_UPLOADS_PROFILES.$filename,
+	'absolutePath'=>PATH_UPLOADS_PROFILES.$filename
+));
+
+?>

bl-kernel/ajax/save-as-draft.php

@@ -0,0 +1,52 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Create/edit a page and save as draft
+| If the UUID already exists the page is updated
+|
+| @_POST['title']	string	Page title
+| @_POST['content']	string	Page content
+| @_POST['uuid']	string	Page uuid
+| @_POST['uuid']	string	Page type, by default is draft
+|
+| @return	array
+*/
+
+// $_POST
+// ----------------------------------------------------------------------------
+$title = isset($_POST['title']) ? $_POST['title'] : false;
+$content = isset($_POST['content']) ? $_POST['content'] : false;
+$uuid = isset($_POST['uuid']) ? $_POST['uuid'] : false;
+$type = isset($_POST['type']) ? $_POST['type'] : 'draft';
+// ----------------------------------------------------------------------------
+
+// Check UUID
+if (empty($uuid)) {
+	ajaxResponse(1, 'Save as draft fail. UUID not defined.');
+}
+
+$page = array(
+	'uuid'=>$uuid,
+	'key'=>$uuid,
+	'slug'=>$uuid,
+	'title'=>$title,
+	'content'=>$content,
+	'type'=>$type
+);
+
+// Get the page key by the UUID
+$pageKey = $pages->getByUUID($uuid);
+
+// if pageKey is empty means the page doesn't exist
+if (empty($pageKey)) {
+	createPage($page);
+} else {
+	editPage($page);
+}
+
+ajaxResponse(0, 'Save as draft successfully.', array(
+	'uuid'=>$uuid
+));
+
+?>

bl-kernel/ajax/upload-images.php

@@ -0,0 +1,95 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+header('Content-Type: application/json');
+
+/*
+| Upload an image to a particular page
+|
+| @_POST['uuid']	string	Page uuid
+|
+| @return		array
+*/
+
+// $_POST
+// ----------------------------------------------------------------------------
+$uuid = empty($_POST['uuid']) ? false : $_POST['uuid'];
+// ----------------------------------------------------------------------------
+
+// Check path traversal on $uuid
+if ($uuid) {
+	if (Text::stringContains($uuid, DS, false)) {
+		$message = 'Path traversal detected.';
+		Log::set($message, LOG_TYPE_ERROR);
+		ajaxResponse(1, $message);
+	}
+}
+
+// Set upload directory
+if ($uuid && IMAGE_RESTRICT) {
+	$imageDirectory = PATH_UPLOADS_PAGES . $uuid . DS;
+	$thumbnailDirectory = $imageDirectory . 'thumbnails' . DS;
+	if (!Filesystem::directoryExists($thumbnailDirectory)) {
+		Filesystem::mkdir($thumbnailDirectory, true);
+	}
+} else {
+	$imageDirectory = PATH_UPLOADS;
+	$thumbnailDirectory = PATH_UPLOADS_THUMBNAILS;
+}
+
+$images = array();
+foreach ($_FILES['images']['name'] as $uuid => $filename) {
+	// Check for errors
+	if ($_FILES['images']['error'][$uuid] != 0) {
+		$message = $L->g('Maximum load file size allowed:') . ' ' . ini_get('upload_max_filesize');
+		Log::set($message, LOG_TYPE_ERROR);
+		ajaxResponse(1, $message);
+	}
+
+	// Convert URL characters such as spaces or quotes to characters
+	$filename = urldecode($filename);
+
+	// Check path traversal on $filename
+	if (Text::stringContains($filename, DS, false)) {
+		$message = 'Path traversal detected.';
+		Log::set($message, LOG_TYPE_ERROR);
+		ajaxResponse(1, $message);
+	}
+
+	// Check file extension
+	$fileExtension = Filesystem::extension($filename);
+	$fileExtension = Text::lowercase($fileExtension);
+	if (!in_array($fileExtension, $GLOBALS['ALLOWED_IMG_EXTENSION'])) {
+		$message = $L->g('File type is not supported. Allowed types:') . ' ' . implode(', ', $GLOBALS['ALLOWED_IMG_EXTENSION']);
+		Log::set($message, LOG_TYPE_ERROR);
+		ajaxResponse(1, $message);
+	}
+
+	// Check file MIME Type
+	$fileMimeType = Filesystem::mimeType($_FILES['images']['tmp_name'][$uuid]);
+	if ($fileMimeType !== false) {
+		if (!in_array($fileMimeType, $GLOBALS['ALLOWED_IMG_MIMETYPES'])) {
+			$message = $L->g('File mime type is not supported. Allowed types:') . ' ' . implode(', ', $GLOBALS['ALLOWED_IMG_MIMETYPES']);
+			Log::set($message, LOG_TYPE_ERROR);
+			ajaxResponse(1, $message);
+		}
+	}
+
+	// Move from PHP tmp file to Bludit tmp directory
+	Filesystem::mv($_FILES['images']['tmp_name'][$uuid], PATH_TMP . $filename);
+
+	// Transform the image and generate the thumbnail
+	$image = transformImage(PATH_TMP . $filename, $imageDirectory, $thumbnailDirectory);
+
+	if ($image) {
+		chmod($image, 0644);
+		$filename = Filesystem::filename($image);
+		array_push($images, $filename);
+	} else {
+		$message = 'Error after transformImage() function.';
+		Log::set($message, LOG_TYPE_ERROR);
+		ajaxResponse(1, $message);
+	}
+}
+
+ajaxResponse(0, 'Images uploaded.', array(
+	'images' => $images
+));

bl-kernel/boot/admin.php

@@ -0,0 +1,104 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// Start the session
+// If the session is not possible to start the admin area is not available
+Session::start($site->urlPath(), $site->isHTTPS());
+if (Session::started()===false) {
+	exit('Bludit CMS. Session initialization failed.');
+}
+
+$login = new Login();
+
+$layout = array(
+	'controller'=>null,
+	'view'=>null,
+	'template'=>'index.php',
+	'slug'=>null,
+	'plugin'=>false,
+	'parameters'=>null,
+	'title'=>'Bludit'
+);
+
+// Get the Controller
+$explodeSlug = $url->explodeSlug();
+$layout['controller'] = $layout['view'] = $layout['slug'] = empty($explodeSlug[0])?'dashboard':$explodeSlug[0];
+unset($explodeSlug[0]);
+
+// Get the Plugins
+include(PATH_RULES.'60.plugins.php');
+// Check if the user want to access to an admin controller or view from a plugin
+if ($layout['controller'] === 'plugin' && !empty($explodeSlug)) {
+	// Lowercase plugins class name to search by case-insensitive
+	$pluginsLowerCases = array_change_key_case($pluginsInstalled);
+	$pluginName = Text::lowercase(array_shift($explodeSlug));
+	if (isset($pluginsLowerCases[$pluginName])) {
+		$layout['plugin'] = $pluginsLowerCases[$pluginName];
+	}
+}
+
+// Get the URL parameters
+$layout['parameters'] = implode('/', $explodeSlug);
+
+// --- AJAX ---
+if ($layout['slug']==='ajax') {
+	if ($login->isLogged()) {
+		// Rules: Security check CSRF
+		include(PATH_RULES.'99.security.php');
+
+		// Load the ajax file
+		if (Sanitize::pathFile(PATH_AJAX, $layout['parameters'].'.php')) {
+			include(PATH_AJAX.$layout['parameters'].'.php');
+		}
+	}
+	header('HTTP/1.1 401 User not logged.');
+	exit(0);
+}
+// --- ADMIN AREA ---
+else
+{
+	// Boot rules
+	include(PATH_RULES.'69.pages.php');
+	include(PATH_RULES.'99.header.php');
+	include(PATH_RULES.'99.paginator.php');
+	include(PATH_RULES.'99.themes.php');
+	include(PATH_RULES.'99.security.php');
+
+	// Page not found.
+	// User not logged.
+	// Slug is login.
+	if ($url->notFound() || !$login->isLogged() || ($url->slug()==='login') ) {
+		$layout['controller']	= 'login';
+		$layout['view']			= 'login';
+		$layout['template']		= 'login.php';
+
+		// Generate the tokenCSRF for the user not logged, when the user log-in the token will be change.
+		$security->generateTokenCSRF();
+	}
+
+	// Define variables
+	$ADMIN_CONTROLLER 	= $layout['controller'];
+	$ADMIN_VIEW 		= $layout['view'];
+
+	// Load plugins before the admin area will be load.
+	Theme::plugins('beforeAdminLoad');
+
+	// Load init.php if the theme has one.
+	if (Sanitize::pathFile(PATH_ADMIN_THEMES, $site->adminTheme().DS.'init.php')) {
+		include(PATH_ADMIN_THEMES.$site->adminTheme().DS.'init.php');
+	}
+
+	// Load controller.
+	if (Sanitize::pathFile(PATH_ADMIN_CONTROLLERS, $layout['controller'].'.php')) {
+		include(PATH_ADMIN_CONTROLLERS.$layout['controller'].'.php');
+	} elseif ($layout['plugin'] && method_exists($layout['plugin'], 'adminController')) {
+		$layout['plugin']->adminController();
+	}
+
+	// Load view and theme.
+	if (Sanitize::pathFile(PATH_ADMIN_THEMES, $site->adminTheme().DS.$layout['template'])) {
+		include(PATH_ADMIN_THEMES.$site->adminTheme().DS.$layout['template']);
+	}
+
+	// Load plugins after the admin area is loaded.
+	Theme::plugins('afterAdminLoad');
+}

bl-kernel/boot/init.php

@@ -0,0 +1,264 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// Bludit version
+define('BLUDIT_VERSION',        '3.16.2');
+define('BLUDIT_CODENAME',       'Valencia');
+define('BLUDIT_RELEASE_DATE',   '2024-08-23');
+define('BLUDIT_BUILD',          '20240806');
+
+// Change to TRUE for debugging
+define('DEBUG_MODE', TRUE);
+define('DEBUG_TYPE', 'INFO'); // INFO, TRACE
+
+//  This determines whether errors should be printed to the screen as part of the output or if they should be hidden from the user.
+ini_set("display_errors", 0);
+
+// Even when display_errors is on, errors that occur during PHP's startup sequence are not displayed.
+// It's strongly recommended to keep display_startup_errors off, except for debugging.
+ini_set('display_startup_errors', 0);
+
+//  If disabled, error message will be solely plain text instead HTML code.
+ini_set("html_errors", 0);
+
+// Tells whether script error messages should be logged to the server's error log or error_log.
+ini_set('log_errors', 1);
+
+if (DEBUG_MODE) {
+	error_reporting(E_ERROR | E_WARNING | E_PARSE | E_NOTICE);
+} else {
+	error_reporting(E_ERROR);
+}
+
+// PHP paths
+// PATH_ROOT and PATH_BOOT are defined in index.php
+define('PATH_LANGUAGES',		PATH_ROOT . 'bl-languages' . DS);
+define('PATH_THEMES',			PATH_ROOT . 'bl-themes' . DS);
+define('PATH_PLUGINS',			PATH_ROOT . 'bl-plugins' . DS);
+define('PATH_KERNEL',			PATH_ROOT . 'bl-kernel' . DS);
+define('PATH_CONTENT',			PATH_ROOT . 'bl-content' . DS);
+
+define('PATH_ABSTRACT',			PATH_KERNEL . 'abstract' . DS);
+define('PATH_RULES',			PATH_KERNEL . 'boot' . DS . 'rules' . DS);
+define('PATH_HELPERS',			PATH_KERNEL . 'helpers' . DS);
+define('PATH_AJAX',			PATH_KERNEL . 'ajax' . DS);
+define('PATH_CORE_JS',			PATH_KERNEL . 'js' . DS);
+
+define('PATH_PAGES',			PATH_CONTENT . 'pages' . DS);
+define('PATH_DATABASES',		PATH_CONTENT . 'databases' . DS);
+define('PATH_PLUGINS_DATABASES',	PATH_CONTENT . 'databases' . DS . 'plugins' . DS);
+define('PATH_TMP',			PATH_CONTENT . 'tmp' . DS);
+define('PATH_UPLOADS',			PATH_CONTENT . 'uploads' . DS);
+define('PATH_WORKSPACES',		PATH_CONTENT . 'workspaces' . DS);
+
+define('PATH_UPLOADS_PAGES',		PATH_UPLOADS . 'pages' . DS);
+define('PATH_UPLOADS_PROFILES',		PATH_UPLOADS . 'profiles' . DS);
+define('PATH_UPLOADS_THUMBNAILS',	PATH_UPLOADS . 'thumbnails' . DS);
+
+define('PATH_ADMIN',			PATH_KERNEL . 'admin' . DS);
+define('PATH_ADMIN_THEMES',		PATH_ADMIN . 'themes' . DS);
+define('PATH_ADMIN_CONTROLLERS',	PATH_ADMIN . 'controllers' . DS);
+define('PATH_ADMIN_VIEWS',		PATH_ADMIN . 'views' . DS);
+
+define('DEBUG_FILE',			PATH_CONTENT . 'debug.txt');
+
+// PAGES DATABASE
+define('DB_PAGES', PATH_DATABASES . 'pages.php');
+define('DB_SITE', PATH_DATABASES . 'site.php');
+define('DB_CATEGORIES', PATH_DATABASES . 'categories.php');
+define('DB_TAGS', PATH_DATABASES . 'tags.php');
+define('DB_SYSLOG', PATH_DATABASES . 'syslog.php');
+define('DB_USERS', PATH_DATABASES . 'users.php');
+define('DB_SECURITY', PATH_DATABASES . 'security.php');
+
+// User environment variables
+include(PATH_KERNEL . 'boot' . DS . 'variables.php');
+
+// Set internal character encoding
+mb_internal_encoding(CHARSET);
+
+// Set HTTP output character encoding
+mb_http_output(CHARSET);
+
+// Inclde Abstract Classes
+include(PATH_ABSTRACT . 'dbjson.class.php');
+include(PATH_ABSTRACT . 'dblist.class.php');
+include(PATH_ABSTRACT . 'plugin.class.php');
+
+// Inclde Classes
+include(PATH_KERNEL . 'pages.class.php');
+include(PATH_KERNEL . 'users.class.php');
+include(PATH_KERNEL . 'tags.class.php');
+include(PATH_KERNEL . 'language.class.php');
+include(PATH_KERNEL . 'site.class.php');
+include(PATH_KERNEL . 'categories.class.php');
+include(PATH_KERNEL . 'syslog.class.php');
+include(PATH_KERNEL . 'pagex.class.php');
+include(PATH_KERNEL . 'category.class.php');
+include(PATH_KERNEL . 'tag.class.php');
+include(PATH_KERNEL . 'user.class.php');
+include(PATH_KERNEL . 'url.class.php');
+include(PATH_KERNEL . 'login.class.php');
+include(PATH_KERNEL . 'parsedown.class.php');
+include(PATH_KERNEL . 'security.class.php');
+
+// Include functions
+include(PATH_KERNEL . 'functions.php');
+
+// Include Helpers Classes
+include(PATH_HELPERS . 'text.class.php');
+include(PATH_HELPERS . 'log.class.php');
+include(PATH_HELPERS . 'date.class.php');
+include(PATH_HELPERS . 'theme.class.php');
+include(PATH_HELPERS . 'session.class.php');
+include(PATH_HELPERS . 'redirect.class.php');
+include(PATH_HELPERS . 'sanitize.class.php');
+include(PATH_HELPERS . 'valid.class.php');
+include(PATH_HELPERS . 'email.class.php');
+include(PATH_HELPERS . 'filesystem.class.php');
+include(PATH_HELPERS . 'alert.class.php');
+include(PATH_HELPERS . 'paginator.class.php');
+include(PATH_HELPERS . 'image.class.php');
+include(PATH_HELPERS . 'tcp.class.php');
+include(PATH_HELPERS . 'dom.class.php');
+include(PATH_HELPERS . 'cookie.class.php');
+
+if (file_exists(PATH_KERNEL . 'bludit.pro.php')) {
+	include(PATH_KERNEL . 'bludit.pro.php');
+}
+
+// Objects
+$pages 		= new Pages();
+$users 		= new Users();
+$tags 		= new Tags();
+$categories = new Categories();
+$site  		= new Site();
+$url		= new Url();
+$security	= new Security();
+$syslog 	= new Syslog();
+
+// --- Relative paths ---
+// This paths are relative for the user / web browsing.
+
+// Base URL
+// The user can define the base URL.
+// Left empty if you want to Bludit try to detect the base URL.
+$base = '';
+
+if (!empty($_SERVER['DOCUMENT_ROOT']) && !empty($_SERVER['SCRIPT_NAME']) && empty($base)) {
+	$base = str_replace($_SERVER['DOCUMENT_ROOT'], '', $_SERVER['SCRIPT_NAME']);
+	$base = dirname($base);
+} elseif (empty($base)) {
+	$base = empty($_SERVER['SCRIPT_NAME']) ? $_SERVER['PHP_SELF'] : $_SERVER['SCRIPT_NAME'];
+	$base = dirname($base);
+}
+
+if (strpos($_SERVER['REQUEST_URI'], $base) !== 0) {
+	$base = '/';
+} elseif ($base != DS) {
+	$base = trim($base, '/');
+	$base = '/' . $base . '/';
+} else {
+	// Workaround for Windows Web Servers
+	$base = '/';
+}
+
+define('HTML_PATH_ROOT', 		$base);
+define('HTML_PATH_THEMES',		HTML_PATH_ROOT . 'bl-themes/');
+define('HTML_PATH_THEME',		HTML_PATH_THEMES . $site->theme() . '/');
+define('HTML_PATH_THEME_CSS',		HTML_PATH_THEME . 'css/');
+define('HTML_PATH_THEME_JS',		HTML_PATH_THEME . 'js/');
+define('HTML_PATH_THEME_IMG',		HTML_PATH_THEME . 'img/');
+define('HTML_PATH_ADMIN_ROOT',		HTML_PATH_ROOT . ADMIN_URI_FILTER . '/');
+define('HTML_PATH_ADMIN_THEME',		HTML_PATH_ROOT . 'bl-kernel/admin/themes/' . $site->adminTheme() . '/');
+define('HTML_PATH_ADMIN_THEME_JS',	HTML_PATH_ADMIN_THEME . 'js/');
+define('HTML_PATH_ADMIN_THEME_CSS',	HTML_PATH_ADMIN_THEME . 'css/');
+define('HTML_PATH_CORE_JS',		HTML_PATH_ROOT . 'bl-kernel/js/');
+define('HTML_PATH_CORE_CSS',		HTML_PATH_ROOT . 'bl-kernel/css/');
+define('HTML_PATH_CORE_IMG',		HTML_PATH_ROOT . 'bl-kernel/img/');
+define('HTML_PATH_CONTENT',		HTML_PATH_ROOT . 'bl-content/');
+define('HTML_PATH_UPLOADS',		HTML_PATH_ROOT . 'bl-content/uploads/');
+define('HTML_PATH_UPLOADS_PAGES',	HTML_PATH_UPLOADS . 'pages/');
+define('HTML_PATH_UPLOADS_PROFILES',	HTML_PATH_UPLOADS . 'profiles/');
+define('HTML_PATH_UPLOADS_THUMBNAILS',	HTML_PATH_UPLOADS . 'thumbnails/');
+define('HTML_PATH_PLUGINS',		HTML_PATH_ROOT . 'bl-plugins/');
+
+// --- Objects with dependency ---
+$language = new Language($site->language());
+$url->checkFilters($site->uriFilters());
+
+// --- CONSTANTS with dependency ---
+
+// Tag URI filter
+define('TAG_URI_FILTER', $url->filters('tag'));
+
+// Category URI filter
+define('CATEGORY_URI_FILTER', $url->filters('category'));
+
+// Page URI filter
+define('PAGE_URI_FILTER', $url->filters('page'));
+
+// Content order by: date / position
+define('ORDER_BY', $site->orderBy());
+
+// Allow unicode characters in the URL
+define('EXTREME_FRIENDLY_URL', $site->extremeFriendly());
+
+// Minutes to execute the autosave function
+define('AUTOSAVE_INTERVAL', $site->autosaveInterval());
+
+// TRUE for upload images restric to a pages, FALSE to upload images in common
+define('IMAGE_RESTRICT', $site->imageRestrict());
+
+// TRUE to convert relatives images to absoultes, FALSE No changes apply
+define('IMAGE_RELATIVE_TO_ABSOLUTE', $site->imageRelativeToAbsolute());
+
+// TRUE if the markdown parser is enabled
+define('MARKDOWN_PARSER', $site->markdownParser());
+
+// --- PHP paths with dependency ---
+// This paths are absolutes for the OS
+define('THEME_DIR',			PATH_ROOT . 'bl-themes' . DS . $site->theme() . DS);
+define('THEME_DIR_PHP',			THEME_DIR . 'php' . DS);
+define('THEME_DIR_CSS',			THEME_DIR . 'css' . DS);
+define('THEME_DIR_JS',			THEME_DIR . 'js' . DS);
+define('THEME_DIR_IMG',			THEME_DIR . 'img' . DS);
+define('THEME_DIR_LANG',		THEME_DIR . 'languages' . DS);
+
+// --- Absolute paths with domain ---
+// This paths are absolutes for the user / web browsing.
+define('DOMAIN',			$site->domain());
+define('DOMAIN_BASE',			DOMAIN . HTML_PATH_ROOT);
+define('DOMAIN_CORE_JS',		DOMAIN . HTML_PATH_CORE_JS);
+define('DOMAIN_CORE_CSS',		DOMAIN . HTML_PATH_CORE_CSS);
+define('DOMAIN_THEME',			DOMAIN . HTML_PATH_THEME);
+define('DOMAIN_THEME_CSS',		DOMAIN . HTML_PATH_THEME_CSS);
+define('DOMAIN_THEME_JS',		DOMAIN . HTML_PATH_THEME_JS);
+define('DOMAIN_THEME_IMG',		DOMAIN . HTML_PATH_THEME_IMG);
+define('DOMAIN_ADMIN_THEME',		DOMAIN . HTML_PATH_ADMIN_THEME);
+define('DOMAIN_ADMIN_THEME_CSS',	DOMAIN . HTML_PATH_ADMIN_THEME_CSS);
+define('DOMAIN_ADMIN_THEME_JS',		DOMAIN . HTML_PATH_ADMIN_THEME_JS);
+define('DOMAIN_UPLOADS',		DOMAIN . HTML_PATH_UPLOADS);
+define('DOMAIN_UPLOADS_PAGES',		DOMAIN . HTML_PATH_UPLOADS_PAGES);
+define('DOMAIN_UPLOADS_PROFILES',	DOMAIN . HTML_PATH_UPLOADS_PROFILES);
+define('DOMAIN_UPLOADS_THUMBNAILS',	DOMAIN . HTML_PATH_UPLOADS_THUMBNAILS);
+define('DOMAIN_PLUGINS',		DOMAIN . HTML_PATH_PLUGINS);
+define('DOMAIN_CONTENT',		DOMAIN . HTML_PATH_CONTENT);
+
+define('DOMAIN_ADMIN',			DOMAIN_BASE . ADMIN_URI_FILTER . '/');
+
+define('DOMAIN_TAGS',			Text::addSlashes(DOMAIN_BASE . TAG_URI_FILTER, false, true));
+define('DOMAIN_CATEGORIES',		Text::addSlashes(DOMAIN_BASE . CATEGORY_URI_FILTER, false, true));
+define('DOMAIN_PAGES',			Text::addSlashes(DOMAIN_BASE . PAGE_URI_FILTER, false, true));
+
+$ADMIN_CONTROLLER = '';
+$ADMIN_VIEW = '';
+$ID_EXECUTION = uniqid(); // string 13 characters long
+$WHERE_AM_I = $url->whereAmI();
+
+// --- Objects shortcuts ---
+$L = $language;
+
+// DEBUG: Print constants
+// $arr = array_filter(get_defined_constants(), 'is_string');
+// echo json_encode($arr);
+// exit;

bl-kernel/boot/rules/60.plugins.php

@@ -0,0 +1,134 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Variables
+// ============================================================================
+
+$plugins = array(
+	'siteHead'=>array(),
+	'siteBodyBegin'=>array(),
+	'siteBodyEnd'=>array(),
+	'siteSidebar'=>array(),
+	'beforeSiteLoad'=>array(),
+	'afterSiteLoad'=>array(),
+
+	'pageBegin'=>array(),
+	'pageEnd'=>array(),
+
+	'beforeAdminLoad'=>array(),
+	'afterAdminLoad'=>array(),
+	'adminHead'=>array(),
+	'adminBodyBegin'=>array(),
+	'adminBodyEnd'=>array(),
+	'adminSidebar'=>array(),
+	'adminContentSidebar'=>array(),
+	'dashboard'=>array(),
+
+	'beforeAll'=>array(),
+	'afterAll'=>array(),
+
+	'paginator'=>array(),
+
+	'afterPageCreate'=>array(),
+	'afterPageModify'=>array(),
+	'afterPageDelete'=>array(),
+
+	'loginHead'=>array(),
+	'loginBodyBegin'=>array(),
+	'loginBodyEnd'=>array(),
+
+	'all'=>array()
+);
+
+$pluginsEvents = $plugins;
+unset($pluginsEvents['all']);
+
+$pluginsInstalled = array();
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+function buildPlugins()
+{
+	global $plugins;
+	global $pluginsEvents;
+	global $pluginsInstalled;
+	global $L;
+	global $site;
+
+	// Get declared clasess BEFORE load plugins clasess
+	$currentDeclaredClasess = get_declared_classes();
+
+	// List plugins directories
+	$list = Filesystem::listDirectories(PATH_PLUGINS);
+	// Load each plugin clasess
+	foreach ($list as $pluginPath) {
+		// Check if the directory has the plugin.php
+		if (file_exists($pluginPath.DS.'plugin.php')) {
+			include_once($pluginPath.DS.'plugin.php');
+		}
+	}
+
+	// Get plugins clasess loaded
+	$pluginsDeclaredClasess = array_diff(get_declared_classes(), $currentDeclaredClasess);
+
+	foreach ($pluginsDeclaredClasess as $pluginClass) {
+		$Plugin = new $pluginClass;
+
+		// Check if the plugin is translated
+		$languageFilename = PATH_PLUGINS.$Plugin->directoryName().DS.'languages'.DS.$site->language().'.json';
+		if (!Sanitize::pathFile($languageFilename)) {
+			$languageFilename = PATH_PLUGINS.$Plugin->directoryName().DS.'languages'.DS.DEFAULT_LANGUAGE_FILE;
+		}
+
+		$database = file_get_contents($languageFilename);
+		$database = json_decode($database, true);
+
+		// Set name and description from the language file
+		$Plugin->setMetadata('name',$database['plugin-data']['name']);
+		$Plugin->setMetadata('description',$database['plugin-data']['description']);
+
+		// Remove name and description from the language file loaded and add new words if there are
+		// This function overwrite the key=>value
+		unset($database['plugin-data']);
+		if (!empty($database)) {
+			$L->add($database);
+		}
+
+		// $plugins['all'] Array with all plugins, installed and not installed
+		$plugins['all'][$pluginClass] = $Plugin;
+
+		// If the plugin is installed insert on the hooks
+		if ($Plugin->installed()) {
+			// Include custom hooks
+			if (!empty($Plugin->customHooks)) {
+				foreach ($Plugin->customHooks as $customHook) {
+					if (!isset($plugins[$customHook])) {
+						$plugins[$customHook] = array();
+						$pluginsEvents[$customHook] = array();
+					}
+				}
+			}
+
+			$pluginsInstalled[$pluginClass] = $Plugin;
+			foreach ($pluginsEvents as $event=>$value) {
+				if (method_exists($Plugin, $event)) {
+					array_push($plugins[$event], $Plugin);
+				}
+			}
+		}
+
+		// Sort the plugins by the position for the site sidebar
+		uasort($plugins['siteSidebar'], function ($a, $b) {
+				return $a->position()>$b->position();
+			}
+		);
+	}
+}
+
+// ============================================================================
+// Main
+// ============================================================================
+
+buildPlugins();

bl-kernel/boot/rules/60.router.php

@@ -0,0 +1,23 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// Redirect admin, from /admin to /admin/
+if ($url->uri()==HTML_PATH_ROOT.ADMIN_URI_FILTER) {
+	Redirect::url(DOMAIN_ADMIN);
+}
+
+// Redirect blog, from /blog to /blog/
+// This rule only works when the user set a page as homepage
+if ($url->uri()==HTML_PATH_ROOT.'blog' && $site->homepage()) {
+	$filter = $url->filters('blog');
+	$finalURL = Text::addSlashes(DOMAIN_BASE.$filter, false, true);
+	Redirect::url($finalURL);
+}
+
+// Redirect pages, from /my-page/ to /my-page
+if ($url->whereAmI()=='page' && !$url->notFound()) {
+	$pageKey = $url->slug();
+	if (Text::endsWith($pageKey, '/')) {
+		$pageKey = rtrim($pageKey, '/');
+		Redirect::url(DOMAIN_PAGES.$pageKey);
+	}
+}

bl-kernel/boot/rules/69.pages.php

@@ -0,0 +1,86 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Variables
+// ============================================================================
+
+// Array with pages, each page is a Page Object
+// Filtered by pagenumber, number of items per page and sorted by date/position
+/*
+	array(
+		0 => Page Object,
+		1 => Page Object,
+		...
+		N => Page Object
+	)
+*/
+$content = array();
+
+// Page filtered by the user, is a Page Object
+$page = false;
+
+// Array with static content, each item is a Page Object
+// Order by position
+/*
+	array(
+		0 => Page Object,
+		1 => Page Object,
+		...
+		N => Page Object
+	)
+*/
+$staticContent = $staticPages = buildStaticPages();
+
+// ============================================================================
+// Main
+// ============================================================================
+
+// Execute the scheduler
+if ($pages->scheduler()) {
+	// Execute plugins with the hook afterPageCreate
+	Theme::plugins('afterPageCreate');
+
+	reindexTags();
+        reindexCategories();
+
+	// Add to syslog
+	$syslog->add(array(
+		'dictionaryKey'=>'content-published-from-scheduler',
+		'notes'=>''
+	));
+}
+
+// Set home page if the user defined one
+if ($site->homepage() && $url->whereAmI()==='home') {
+	$pageKey = $site->homepage();
+	if ($pages->exists($pageKey)) {
+		$url->setSlug($pageKey);
+		$url->setWhereAmI('page');
+	}
+}
+
+// Build specific page
+if ($url->whereAmI()==='page') {
+	$content[0] = $page = buildThePage();
+}
+// Build content by tag
+elseif ($url->whereAmI()==='tag') {
+	$content = buildPagesByTag();
+}
+// Build content by category
+elseif ($url->whereAmI()==='category') {
+	$content = buildPagesByCategory();
+}
+// Build content for the homepage
+elseif ( ($url->whereAmI()==='home') || ($url->whereAmI()==='blog') ) {
+        $content = buildPagesForHome();
+}
+
+if (isset($content[0])) {
+	$page = $content[0];
+}
+
+// If set notFound, create the page 404
+if ($url->notFound()) {
+	$content[0] = $page = buildErrorPage();
+}

bl-kernel/boot/rules/99.header.php

@@ -0,0 +1,4 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+header('HTTP/1.0 '.$url->httpCode().' '.$url->httpMessage());
+header('X-Powered-By: Bludit');

bl-kernel/boot/rules/99.paginator.php

@@ -0,0 +1,54 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// Current page number
+$currentPage = $url->pageNumber();
+Paginator::set('currentPage', $currentPage);
+
+if ($url->whereAmI()=='admin') {
+	$itemsPerPage = ITEMS_PER_PAGE_ADMIN;
+	$numberOfItems = $pages->count(true);
+} elseif ($url->whereAmI()=='tag') {
+	$itemsPerPage = $site->itemsPerPage();
+	$tagKey = $url->slug();
+	$numberOfItems = $tags->numberOfPages($tagKey);
+} elseif ($url->whereAmI()=='category') {
+	$itemsPerPage = $site->itemsPerPage();
+	$categoryKey = $url->slug();
+	$numberOfItems = $categories->numberOfPages($categoryKey);
+} else {
+	$itemsPerPage = $site->itemsPerPage();
+	$numberOfItems = $pages->count(true);
+}
+
+// Execute hook from plugins
+Theme::plugins('paginator');
+
+// Items per page
+Paginator::set('itemsPerPage', $itemsPerPage);
+
+// Amount of items
+Paginator::set('numberOfItems', $numberOfItems);
+
+// Amount of pages
+$numberOfPages = (int) max(ceil($numberOfItems / $itemsPerPage), 1);
+Paginator::set('numberOfPages', $numberOfPages);
+
+// TRUE if exists a next page to show
+$showNext = $numberOfPages > $currentPage;
+Paginator::set('showNext', $showNext);
+
+// TRUE if exists a previous page to show
+$showPrev = $currentPage > Paginator::firstPage();
+Paginator::set('showPrev', $showPrev);
+
+// TRUE if exists a next and previous page to show
+$showNextPrev = $showNext && $showPrev;
+Paginator::set('showNextPrev', $showNextPrev);
+
+// Integer with the next page
+$nextPage = max(0, $currentPage+1);
+Paginator::set('nextPage', $nextPage);
+
+// Integer with the previous page
+$prevPage = min($numberOfPages, $currentPage-1);
+Paginator::set('prevPage', $prevPage);

bl-kernel/boot/rules/99.security.php

@@ -0,0 +1,34 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Variables
+// ============================================================================
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+// ============================================================================
+// Main before POST
+// ============================================================================
+
+// ============================================================================
+// POST Method
+// ============================================================================
+
+if ($_SERVER['REQUEST_METHOD'] == 'POST') {
+	$token = isset($_POST['tokenCSRF']) ? Sanitize::html($_POST['tokenCSRF']) : false;
+	if (!$security->validateTokenCSRF($token)) {
+		Log::set(__FILE__.LOG_SEP.'Error occurred when trying to validate the tokenCSRF.', ALERT_STATUS_FAIL);
+		Log::set(__FILE__.LOG_SEP.'Token via POST ['.$token.']', ALERT_STATUS_FAIL);
+
+		Session::destroy();
+		Redirect::page('login');
+	} else {
+		unset( $_POST['tokenCSRF'] );
+	}
+}
+
+// ============================================================================
+// Main after POST
+// ============================================================================

bl-kernel/boot/rules/99.themes.php

@@ -0,0 +1,87 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// ============================================================================
+// Variables
+// ============================================================================
+$themePlugin = getPlugin($site->theme()); // Returns plugin object or False
+
+// ============================================================================
+// Functions
+// ============================================================================
+
+function buildThemes()
+{
+	global $site;
+
+	$themes = array();
+	$themesPaths = Filesystem::listDirectories(PATH_THEMES);
+
+	foreach ($themesPaths as $themePath) {
+		// Check if the theme is translated.
+		$languageFilename = $themePath . DS . 'languages' . DS . $site->language() . '.json';
+		if (!Sanitize::pathFile($languageFilename)) {
+			$languageFilename = $themePath . DS . 'languages' . DS . DEFAULT_LANGUAGE_FILE;
+		}
+
+		if (Sanitize::pathFile($languageFilename)) {
+			$database = file_get_contents($languageFilename);
+			$database = json_decode($database, true);
+			if (empty($database)) {
+				Log::set('99.themes.php' . LOG_SEP . 'Language file error on theme ' . $themePath);
+				break;
+			}
+
+			$database = $database['theme-data'];
+
+			$database['dirname'] = basename($themePath);
+
+			// --- Metadata ---
+			$filenameMetadata = $themePath . DS . 'metadata.json';
+
+			if (Sanitize::pathFile($filenameMetadata)) {
+				$metadataString = file_get_contents($filenameMetadata);
+				$metadata = json_decode($metadataString, true);
+
+				$database['compatible'] = false;
+				if (!empty($metadata['compatible'])) {
+					$bluditRoot = explode('.', BLUDIT_VERSION);
+					$compatible = explode(',', $metadata['compatible']);
+					foreach ($compatible as $version) {
+						$root = explode('.', $version);
+						if ($root[0] == $bluditRoot[0] && $root[1] == $bluditRoot[1]) {
+							$database['compatible'] = true;
+						}
+					}
+				}
+
+				$database = $database + $metadata;
+				array_push($themes, $database);
+			}
+		}
+	}
+
+	return $themes;
+}
+
+// ============================================================================
+// Main
+// ============================================================================
+
+// Load the language file
+$languageFilename = THEME_DIR . 'languages' . DS . $site->language() . '.json';
+if (!Sanitize::pathFile($languageFilename)) {
+	$languageFilename = THEME_DIR . 'languages' . DS . DEFAULT_LANGUAGE_FILE;
+}
+
+if (Sanitize::pathFile($languageFilename)) {
+	$database = file_get_contents($languageFilename);
+	$database = json_decode($database, true);
+
+	// Remote the name and description.
+	unset($database['theme-data']);
+
+	// Load words from the theme language
+	if (!empty($database)) {
+		$L->add($database);
+	}
+}

bl-kernel/boot/site.php

@@ -0,0 +1,35 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+// Load plugins rules
+include(PATH_RULES.'60.plugins.php');
+
+// Plugins before all
+Theme::plugins('beforeAll');
+
+// Load rules
+include(PATH_RULES.'60.router.php');
+include(PATH_RULES.'69.pages.php');
+include(PATH_RULES.'99.header.php');
+include(PATH_RULES.'99.paginator.php');
+include(PATH_RULES.'99.themes.php');
+
+// Plugins before site loaded
+Theme::plugins('beforeSiteLoad');
+
+// Theme init.php
+if (Sanitize::pathFile(PATH_THEMES, $site->theme().DS.'init.php')) {
+	include(PATH_THEMES.$site->theme().DS.'init.php');
+}
+
+// Theme HTML
+if (Sanitize::pathFile(PATH_THEMES, $site->theme().DS.'index.php')) {
+	include(PATH_THEMES.$site->theme().DS.'index.php');
+} else {
+	$L->p('Please check your theme configuration in the admin panel. Check for an active theme.');
+}
+
+// Plugins after site loaded
+Theme::plugins('afterSiteLoad');
+
+// Plugins after all
+Theme::plugins('afterAll');

bl-kernel/boot/variables.php

@@ -0,0 +1,113 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+/*
+	Environment variables
+	If you are going to do some changes is recommended do it before the installation
+*/
+
+// Log
+define('LOG_SEP', ' | ');
+define('LOG_TYPE_INFO', '[INFO]');
+define('LOG_TYPE_WARN', '[WARN]');
+define('LOG_TYPE_ERROR', '[ERROR]');
+
+// Protecting against Symlink attacks
+define('CHECK_SYMBOLIC_LINKS', TRUE);
+
+// Alert status ok
+define('ALERT_STATUS_OK', 0);
+
+// Alert status fail
+define('ALERT_STATUS_FAIL', 1);
+
+// Profile image size
+define('PROFILE_IMG_WIDTH', 400);
+define('PROFILE_IMG_HEIGHT', 400);
+define('PROFILE_IMG_QUALITY', 100); // 100%
+
+// Items per page for admin area
+define('ITEMS_PER_PAGE_ADMIN', 20);
+
+// Password length
+define('PASSWORD_LENGTH', 6);
+
+// Password salt length
+define('SALT_LENGTH', 8);
+
+// Page brake string
+define('PAGE_BREAK', '<!-- pagebreak -->');
+
+// Remember me
+define('REMEMBER_COOKIE_USERNAME', 'BLUDITREMEMBERUSERNAME');
+define('REMEMBER_COOKIE_TOKEN', 'BLUDITREMEMBERTOKEN');
+define('REMEMBER_COOKIE_EXPIRE_IN_DAYS', 30);
+
+// Filename
+define('FILENAME', 'index.txt');
+
+// Database date format
+define('DB_DATE_FORMAT', 'Y-m-d H:i:s');
+
+// Database date format
+define('BACKUP_DATE_FORMAT', 'Y-m-d-H-i-s');
+
+// Sitemap date format
+define('SITEMAP_DATE_FORMAT', 'Y-m-d');
+
+// Date format for Manage Content, Manage Users
+define('ADMIN_PANEL_DATE_FORMAT', 'D, j M Y, H:i');
+
+// Date format for Dashboard schedule posts
+define('SCHEDULED_DATE_FORMAT', 'D, j M Y, H:i');
+
+// Notifications date format
+define('NOTIFICATIONS_DATE_FORMAT', 'D, j M Y, H:i');
+
+// Manage content date format
+define('MANAGE_CONTENT_DATE_FORMAT', 'D, j M Y, H:i');
+
+// Amount of items to show on notification panel
+define('NOTIFICATIONS_AMOUNT', 10);
+
+// Token time to live for login via email. The offset is defined by http://php.net/manual/en/datetime.modify.php
+define('TOKEN_EMAIL_TTL', '+15 minutes');
+
+// Charset, default UTF-8.
+define('CHARSET', 'UTF-8');
+
+// Permissions for new directories
+define('DIR_PERMISSIONS', 0755);
+
+// Admin URI filter to access to the admin panel
+define('ADMIN_URI_FILTER', 'admin');
+
+// Default language file, in this case is English
+define('DEFAULT_LANGUAGE_FILE', 'en.json');
+
+// Session timeout server side, gc_maxlifetime
+// 3600 = 1hour
+define('SESSION_GC_MAXLIFETIME', 3600);
+
+// Session lifetime of the cookie in seconds which is sent to the browser
+// The value 0 means until the browser is closed
+define('SESSION_COOKIE_LIFE_TIME', 0);
+
+// Alert notification disappear in X seconds
+define('ALERT_DISAPPEAR_IN', 3);
+
+// Number of images to show in the media manager per page
+define('MEDIA_MANAGER_NUMBER_OF_FILES', 5);
+
+// Sort the image by date
+define('MEDIA_MANAGER_SORT_BY_DATE', true);
+
+// Constant arrays using define are not allowed in PHP 5.6 or earlier
+
+// Type of pages included in the tag database
+$GLOBALS['DB_TAGS_TYPES'] = array('published','static','sticky');
+
+// Allowed image extensions
+$GLOBALS['ALLOWED_IMG_EXTENSION'] = array('gif', 'png', 'jpg', 'jpeg', 'svg', 'webp');
+
+// Allowed image mime types
+$GLOBALS['ALLOWED_IMG_MIMETYPES'] = array('image/gif', 'image/png', 'image/jpeg', 'image/svg+xml', 'image/webp');

bl-kernel/categories.class.php

@@ -0,0 +1,43 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+class Categories extends dbList {
+
+	function __construct()
+	{
+		parent::__construct(DB_CATEGORIES);
+	}
+
+	function numberOfPages($key)
+	{
+		return $this->countItems($key);
+	}
+
+	public function reindex()
+	{
+		global $pages;
+
+		// Foreach category
+		foreach ($this->db as $key=>$value) {
+			$this->db[$key]['list'] = array();
+		}
+
+		// Get pages database
+		$db = $pages->getDB(false);
+		foreach ($db as $pageKey=>$pageFields) {
+			if (!empty($pageFields['category'])) {
+				$categoryKey = $pageFields['category'];
+				if (isset($this->db[$categoryKey]['list'])) {
+					if (
+						($db[$pageKey]['type']=='published') ||
+						($db[$pageKey]['type']=='sticky') ||
+						($db[$pageKey]['type']=='static')
+					) {
+						array_push($this->db[$categoryKey]['list'], $pageKey);
+					}
+				}
+			}
+		}
+
+		return $this->save();
+	}
+}

bl-kernel/category.class.php

@@ -0,0 +1,78 @@
+<?php defined('BLUDIT') or die('Bludit CMS.');
+
+class Category {
+
+	protected $vars;
+
+	function __construct($key)
+	{
+		global $categories;
+		if (isset($categories->db[$key])) {
+			$this->vars['name'] 		= $categories->db[$key]['name'];
+			$this->vars['template'] 	= $categories->db[$key]['template'];
+			$this->vars['description'] 	= $categories->db[$key]['description'];
+			$this->vars['key'] 		= $key;
+			$this->vars['permalink'] 	= DOMAIN_CATEGORIES . $key;
+			$this->vars['list'] 		= $categories->db[$key]['list'];
+		} else {
+			$errorMessage = 'Category not found in database by key ['.$key.']';
+			Log::set(__METHOD__.LOG_SEP.$errorMessage);
+			throw new Exception($errorMessage);
+		}
+	}
+
+	public function getValue($field)
+	{
+		if (isset($this->vars[$field])) {
+			return $this->vars[$field];
+		}
+		return false;
+	}
+
+	public function key()
+	{
+		return $this->getValue('key');
+	}
+
+	public function name()
+	{
+		return $this->getValue('name');
+	}
+
+	public function permalink()
+	{
+		return $this->getValue('permalink');
+	}
+
+	public function template()
+	{
+		return $this->getValue('template');
+	}
+
+	public function description()
+	{
+		return $this->getValue('description');
+	}
+
+	// Returns an array with the keys of pages linked to the category
+	public function pages()
+	{
+		return $this->getValue('list');
+	}
+
+	// Returns an array in json format with all the data of the tag
+	public function json($returnsArray=false)
+	{
+		$tmp['key'] 		= $this->key();
+		$tmp['name'] 		= $this->name();
+		$tmp['description'] 	= $this->description();
+		$tmp['permalink'] 	= $this->permalink();
+		$tmp['pages'] 		= $this->pages();
+
+		if ($returnsArray) {
+			return $tmp;
+		}
+
+		return json_encode($tmp);
+	}
+}